{"type": "bundle", "id": "bundle--3ece50c4-ae0f-4154-9533-64d198e21888", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--7e56dfc9-456b-44d1-8112-0381074b68cb", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--3908c942-c269-4fb7-bdda-ad61f60c9674", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--9f4f527e-1c64-4e09-b081-cbc16e97158d", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--eaef19eb-818d-4d14-aaa8-db98c1dc785c", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a995f6e-a8d9-4e9f-a900-0c6f57bebbef", "relationship_type": "located-at", "source_ref": "infrastructure--eaef19eb-818d-4d14-aaa8-db98c1dc785c", "target_ref": "location--7e56dfc9-456b-44d1-8112-0381074b68cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--fe84e560-f8a4-4344-aa2d-28c7bd6906ae", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e06f61da-273d-4449-8ef5-7c64975dccea", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99a28e82-5b54-4405-aadd-dbd8d66fe162", "relationship_type": "located-at", "source_ref": "infrastructure--e06f61da-273d-4449-8ef5-7c64975dccea", "target_ref": "location--3908c942-c269-4fb7-bdda-ad61f60c9674", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--46062c93-0ca5-4245-8d19-6723243f4edc", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41ec1b6b-5a50-42d6-84ea-39f7402b5681", "relationship_type": "located-at", "source_ref": "infrastructure--46062c93-0ca5-4245-8d19-6723243f4edc", "target_ref": "location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--42bf40cc-b66b-460f-9d62-eadd9cde20d8", "name": "CVE-2000-0868", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0868", "external_id": "CVE-2000-0868"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--3f194e41-a7d4-440c-acf8-848baf6a2def", "name": "CVE-2021-22893", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22893", "external_id": "CVE-2021-22893"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e3ed0e0f-9b12-4a57-a12a-912dc1197970", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--beb37bb1-2149-46a0-97d5-aac1bfae6f50", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--caf40b3f-7876-4088-9cdf-8276a0901407", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--5ac02e58-af14-4a17-8bb7-f2df093f2933", "name": "CVE-2024-3400", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "external_id": "CVE-2024-3400"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2ffc85fa-0cd6-4fd6-9c4a-e996c49ea16f", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--89f99014-2ff1-40ea-a2ac-cf67e4bbbf01", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c346d634-2f8a-4762-b9d8-4451a77e4509", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.52.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12cecd8-19b6-48b3-8059-5a821463e738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.171.36.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a960d38e-62bf-4a8e-ae87-f3abcd5e7f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.98.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ec7e43-d6d8-48e1-b254-b6f64b29859b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efc8ae9-c587-4421-a213-5391d7ad01de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f3348c-fb0b-4363-ae37-6e60fc0ac3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7a6de7-807e-476a-8107-4e9cbc656838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d714208e-5439-433b-8be5-3248168bf51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68bfcdd-9232-40d5-9841-57fbf26ac1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1c422d-5540-45df-b81c-186cfb6b58ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956e1edd-ef3f-4d45-a711-357f6a5fce54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a578e6-9037-4aa1-bfd7-888db92e3c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae5f6c5-7c0d-4778-9c59-ee0a70f3c558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6772f783-60f2-44db-b993-e462299ec6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.74.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbee18a-8b71-48d9-b7f5-57758501717a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.226.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9f6192-d5e9-40fc-816a-b9d4e75dd923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.128.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084bf69c-5174-4ff7-895c-f5853be4380e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.167.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849e8285-ec89-41c3-9c8f-da1ed0da1ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.242.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59bb1ac-ad87-49d8-9335-f4303cdcdfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.243.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f789c852-fad9-469e-bce0-ff53fea846d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.244.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79df0e49-55a4-4613-9775-e8fe6651b1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.33.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35aac28d-0806-41cd-8073-bea399ba225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.66.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243447d-2c69-42bd-9337-4187f12b634f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.68.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747c9c8c-b022-48fc-9507-0649fb39e0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.73.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b85cb8a-df21-41aa-a7db-3a945e6cd9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.81.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ee2d65-b501-4851-a316-502b9e6f61f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec28467-c8be-4749-a220-d4ec5c5b7235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fb6d73-b26f-49cf-8422-964e36a0e349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0b3000-e8d0-4559-b013-2d369bfb8684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e256e7d1-b61e-49bf-bf52-89505defecaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08122e8-103a-4fc4-b794-f7939f6777a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e231eab-afda-42f3-b612-7e7c90024cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86d4b61-70bb-4c8d-bcee-1d5dae07cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831513d7-ddac-4afe-8ae2-55fc21e92728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179178d4-b98e-4345-ab19-b5e23efc8c49", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d1881d-d0cb-4e35-b6db-7b17a1ed57e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcf750e-d44b-4012-b659-25af524248fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f85c9e-450e-41f1-bea5-658bc789b6cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.51.99.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721600a7-ea48-44d6-859b-4247db6c5a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.244.97.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d61111-3206-46b0-9f41-180260b9f103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d96c2bd-e42f-45ad-be6e-7730742739c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.239.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb825e3-3921-45e9-b01b-7c50a1b004db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.7.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326d0962-5850-41af-a495-f0d31daf992f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.170.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245c82ef-88c5-47e8-ad77-36d9a5fb320a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.177.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f3d678-df2e-4629-a1c0-209fdc56c082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.219.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad649e1-9489-4738-a9d9-cefaa3879bc9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.239.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3a0739-72c8-4db2-915a-b2a517558eb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.105.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6607d29-a561-44af-9142-f6ad6f329f90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.2.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716c5a8-8ef7-451c-ae0f-f67fa0160e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.17.51.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e5e0db-03f0-4f52-9e48-00efc8fcd105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.161.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91a2c2b-e360-4789-bacf-3d95e4922410", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.97.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca7624b-136b-432a-a44f-f2afff004368", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.240.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed94f6b-4cbc-4725-87fb-3aab1c577c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.118.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dcf4d6-d5f6-45fc-aba0-08e7e62dc582", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.7.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bfd5dd-1069-468b-a607-ab0822ad4ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.193.80.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7050903f-b57b-423c-bb87-6b3d52cf6a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.22.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee27222f-e389-4ed3-aedb-67591229ab84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1812ed85-1f81-49ea-961f-4ba2fe5a6c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8330642b-4517-4a3e-937e-3a292d4a6d15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.219.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce281aad-74c1-48ad-ae56-26c07eaef073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.216.126.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5bcaa3-dc4a-4fda-bcb5-71d501103f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.238.227.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4e84b3-cb8f-46cb-9ada-170b1eaa39f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.255.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65e003d-98e6-4a3d-9c69-2c2ef93e7321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.149.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6df0ef-42ab-47a3-afee-999b69e52799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.207.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47c9fea-09b3-40d5-878f-60b3c2b81681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.207.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eb07c0-e1dd-4637-af0e-382dd4e7dc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.179.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78e8d82-85c4-4d35-8c5f-fa45bed2cd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.156.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ffe17d-f113-4268-8c4b-f233b3472810", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.54.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc54da3a-44ee-4214-bee8-0e9d1438f804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.188.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e90333-aeeb-44bd-81f9-5d7a4bc01334", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.72.56.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ced7c-cd4c-45b9-87bb-4ee9379f528f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.120.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d134bc69-3693-406f-8b50-4038880699bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1d4441-59c6-4c07-b482-aadbf6be9e87", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.76.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5539f97f-0226-4c08-9cb2-38fd6914c974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7822e8b-cbe1-4ef4-a78e-1e5ba7b03088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bc6ec3-286f-4e22-bdfd-4de2df089a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6280d8b5-45e8-4632-8c36-0355f0113883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208bb677-69a3-4103-b3f9-0ea49151651f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.246.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010881ca-2425-49f3-a21c-9a2324c57177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.143.38.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be5c3d0-ff8f-4c2e-8742-d726aaa08854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.124.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d878634-a806-4b82-9f34-788dda6686cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.54.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678ef402-157f-4d0f-91e2-01b502ab1e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.16.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b4beb6-9285-4910-82df-600ff1254c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.85.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca9828e-a648-42f3-842a-b40fb2d0decd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.24.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924bd43-8a0b-44c6-9a53-173870259804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.214.54.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8592b45-c77b-4d25-a9d8-98722d90422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.214.61.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202e2e0d-ff8f-4998-af91-e1d8c3b79979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.214.89.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582695fc-6165-411c-b77a-a710d4885652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.19.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dba8aa3-6df9-4358-9270-ba2bea75a750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d30600-d47a-429b-993a-d3997d8b266e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.201.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf609882-b756-4d12-996c-4ce7e0c30a22", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.222.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc411be5-099c-4485-ad20-4481260a1816", "relationship_type": "indicates", "source_ref": "indicator--cf609882-b756-4d12-996c-4ce7e0c30a22", "target_ref": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35541aa1-e4b5-46db-abb9-78e9a1a901db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.154.221.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed1895b-6d6c-41ef-9dc2-c3ac70b0baa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.106.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196921e8-59e1-4080-85e8-e70b3b9ae1a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.171.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9647a810-33a7-457f-99ec-e17b2cb86f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487685b0-74f5-459a-a818-a7c9a9f8276f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9504d977-198d-4cb0-b34f-e358721d0795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0309f4-68e3-43a2-aaeb-3e45e053b75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.15.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8803e15b-ca9d-4575-8500-fe5ef2992b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.15.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669f4a1f-2c74-441b-a354-46c2c894c8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.55.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0221c8a6-b44e-43f7-945d-5e94668b8736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de9c9f0-02c3-4e95-860e-74af656a8c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.167.179.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5213649c-8e18-4e2b-ad68-62234677920f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.102.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2000-0868, CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.28.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0868", "external_id": "CVE-2000-0868"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--221d19e0-8401-402f-961e-ffdad82a33c1", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7b134ed-d818-437d-ad91-885786866301", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6db18da4-95d9-4607-b88c-f046aaaa6bd2", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "vulnerability--42bf40cc-b66b-460f-9d62-eadd9cde20d8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ea58f1a-384a-4af0-8880-fd4f1dcf2533", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6a0d6b-de9d-4fde-a61d-af5e41291f24", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bfe44b1-df0f-48ee-80fb-a343a15e57ef", "relationship_type": "indicates", "source_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "target_ref": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b84083f-afa5-4bd1-9f1a-4de24944ec9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.233.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a73504-fa01-479d-ba3b-bb9272155f3d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10a6f7c-4025-4369-8d48-3ec18a3b55fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.59.6.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5fdc92-1464-4979-8691-bebad0a16629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8db27ba-64c7-4641-b761-5af032e4251b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dcf584-bb4b-4a55-a161-33b9cf4c07a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b879134-7fa2-49e6-8c2d-7617f5a4bb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f128d3-f558-4140-9169-eb0f1d82577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b889e5-a74b-4b0a-843c-db26846673dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e92986-c69c-44c6-a3b3-e1f5e78bf5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04176b8c-79f5-40b0-9732-f2d78a307551", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49161c2d-100e-43d2-bf84-0c90fb842b69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0667b43f-d26f-45a9-a983-3aafdf0f220c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f89f595-14c6-401d-857b-36066eea79b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05980101-4a51-4336-aadf-cd8565dcfa23", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.227.70.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a273774-e0c7-4996-ba56-436af8af9576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.173.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98631b25-a713-4fe5-a312-ea58a41a6568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.16.116.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e468b3-424f-43d2-ae5b-11bf5f19c702", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.232.66.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87fa3ba-9888-4afc-8dc6-f30e7413edf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a03534-a16c-4f85-ab13-51ccb0c1a0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6584706e-e004-4be8-9510-4f34cdb1d5d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.119.35.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2892a737-2e9b-4dca-b1f8-61739d9fda33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.230.233.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c7c0c-293e-4781-b716-5483f3cb5b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.34.172.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b68c35-0edd-4c45-9ba2-cd8eec37986f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.36.4.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8d6ae0-5f54-42b5-973c-2d48c70e3069", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.48.160.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab27e778-ee1f-4a51-aaad-9724c3ad3974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.170.238.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecca264a-f5e3-4ba7-b876-b85f9e36becc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.172.249.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3eae4a2-d806-45a0-a2ee-6cd26d1868f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.19.79.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9281292b-3b52-4930-b945-98fcaf287ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.242.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a567d09-b216-4375-820b-2e918ba0a5e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1603874-dd3d-4286-9f4b-f6d154d8a2dc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.181.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74708f0a-438a-4fc0-b526-1165d3783a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.164.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09bae2a-d299-46ec-9d00-dd54b11f2789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.238.100.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f111a705-b611-4f44-b81c-5960304c7a28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85e3782-f392-4a7e-9f0d-11d8b04f0c22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b814b7-d812-43fd-a5fd-01a51fcd7051", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06261fc-fded-4983-a7e2-53b7cc3207d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23027b0-19fb-4b24-8ce5-ba109a94f8e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c655a7-c70e-4ee0-ab5b-6b992d0cde15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9823dd7-682b-4472-a9ff-57c267162b7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8e13d0-f6e7-4811-af9e-f16144e9aa5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c58e2f-9368-47fb-ae1a-b19917154f2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce1f39c-eab4-4d80-957f-3cd55f679eb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a72e937-e2ab-49bc-ab25-db5c07a54656", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c45e828-789f-4efc-ac16-c94da51c78c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d304f8-3436-4615-ad9f-be2bcf4c87aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fee863-a57e-4485-a612-4f029ef768ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61d3638-b473-4942-8298-a0af3851a7a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0790fe61-8e1b-4063-a9f5-07ffe190ef47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2a2468-57ec-48ae-9e4d-1a39ef808e49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f04d4de-5404-4fbf-990f-0ee6129771b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cf371c-c878-4ced-b5e3-0b857fc84687", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338ace59-0ef8-4b67-8492-17026ebc63e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.147.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507d7c20-3da3-41db-8ec5-a6d9b314efd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e65d908-466c-477f-adfb-412ae5d1ad52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7a9dbf-6431-4f1d-9252-8c263e7f55da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bb6416-1495-47a7-98c1-5ceb234caf1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a741cf54-ef6f-4682-b230-c41e8e0000cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c090b5ea-7c93-47bd-90f4-c98e0e67a93e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d52680-345f-4162-90d7-05a937c58397", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf06e2f3-473b-4fb0-969a-4d475b265c24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d0a230-1071-4639-8578-48e14664c712", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98341a94-7286-498b-a994-09da015ddca7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250cfd9c-39c4-4195-90e1-1de9034768ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cf95d4-a60f-4854-ba6b-23e62d441e47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4ea797-5be0-408b-89d7-b3dbe23e434c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7957a78f-8525-4852-8b35-e8a06a996ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.135.137.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187e0778-8358-4779-a082-245bcee09a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.27.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88da2e59-51bd-4693-9802-fc15c6af2c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.79.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c728b2c-b3f2-44ef-b906-e707f5e076e1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.53.76.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f36113-01ca-43d1-b41c-54ba519156c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.143.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3b7772-b3f3-41a0-83de-c57ed587be8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.143.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9e9ae2-0d69-4b45-8e3e-444610f833a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.21.162.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae101c3a-53e6-4414-aa07-0fd75fa9e261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.1.25.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c87b743-b919-414c-8afd-b98241633e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.147.45.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af9843d-5d02-4b15-a1ea-cd273354ffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.199.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d82d1c3-3742-4c15-a8a9-cf1851443aa7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.121.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7f2a46-f159-4fa0-b900-e557a15c1628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.174.155.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c123b4-9c1c-41dd-a000-6f7cba2991e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.158.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeda3e36-b977-481e-b883-b5da25d1adef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a24cdc-f07c-4531-b00b-ef574a73a841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdce317e-7cea-47e4-ad31-fb97e5227a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc4132d-3aed-43e5-ac36-4127b73142d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bd805a-61de-43dc-8106-230712bd91c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9816610c-4dfc-439f-a2ff-f94f37eda38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a81888d-967e-4ad6-bdcd-288cc59350ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf08b63-6b9f-414d-99ee-72de37afc8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7676d76-27c3-4176-86a6-d8f03a40fca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e350c9b-2241-4f0e-b204-1299c3e12d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc58daf-33f6-4be5-a862-c771e50602c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a903dc-cfa5-4b39-9eb4-16269fa2617c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4199bed-3425-4115-8567-8008de50ab2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.104.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae268234-a58e-4dae-aacd-34b7c9607424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.118.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad60f6e0-3e4c-407a-bccf-d819b3857016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5df4fd-240b-4cf4-9b6a-d94708a95b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9060f2df-7ef0-4fdc-b2b2-7192cac36244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f37efa-86a9-40f1-bf91-1ef72bb3dfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.185.200.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646fa8f0-8d25-457e-84c4-9bc6047a91ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.248.204.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddbf694-9a29-4020-9337-7168126da715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.122.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b6f99-b868-4d0f-a87a-c7031c784d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.163.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00aa5b6-c0c3-47aa-bdca-78d8b0e5849e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.232.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5373b466-f5b7-4206-88a4-65d4e7491ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.89.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b0bde0-aff3-4e9e-845c-d4dd34cfbe15", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.159.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6bdf6e-71d3-4681-98e5-f79ff663ffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.138.125.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7685977-c381-4a11-8020-630fd5fbc596", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.233.33.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba03831-aa0c-44ce-a74b-654cf4e03a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.235.161.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c33dc5d-3856-4300-bea5-35cddd96512b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.238.254.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e17af71-d5d2-4c2a-8f48-1c6f5a12b192", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.27.16.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e690286-9241-4a78-aefe-da0dfa850c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.90.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f04b578-cf07-4064-8887-6671366a0bb8", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.49.64.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b2a7d-7235-4a18-9e4b-5a85af7c7ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.155.6.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4edae4-89a5-455c-a16f-ff73d9c8fc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.17.232.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b4b043-2793-4748-a626-1585ea0565b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.186.5.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575437f4-38a7-4bbc-be1b-9d7acb70795c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc679c16-cb73-42e1-b5c5-5e5064cfeda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.175.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d762072e-4fc6-483a-9933-36857b343162", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.156.44.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0f93dc-ac68-4509-8e7c-cf08b613fca1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.173.86.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3184aca0-2ff6-4250-8619-569791cdf795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.133.6.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d3e328-f464-46ed-a10a-c62649b74178", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b068f14-2787-419f-9a53-a35680364357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.173.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e679eeb-b5aa-437d-9f3f-fc79f836db21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.240.124.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbdda07-161c-4be2-99e9-7a5b17a35309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c118ba9-6f58-438c-9b28-ab1af736f9e4", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a022e9d7-8aec-4a5b-b402-8a97a81b8698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fa9d3f-fa61-45db-bf5d-5d030df7533b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.217.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ba4589-e410-44d0-9490-a901e6a91a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.112.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72138f73-6723-4275-b633-195723d4d45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.163.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac32f8aa-fa42-43c5-8477-514e4c6a3dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.202.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a81c41-9aed-4d2a-a183-5593c6cadce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.207.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a604921-1123-43ad-81ee-cf1566312726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.208.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53afa5cd-0779-4d61-9894-eb9d22ca1558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.39.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3832e0d-baeb-4629-b0f6-4b5ed6f0a29b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.229.240.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c9806a-8d09-48ec-ad5e-a5c7e1a3e230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.217.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90471f55-88e5-4d48-9931-125a2492f570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9353b7-fb25-4e0f-add8-0806a6326e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9c424b-b3b2-41e4-93a3-53b801c5da82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.122.102.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98c4472-3807-4849-ab14-aa4185e4961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.122.39.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc725077-e6fa-4a5b-82e6-b280996862f4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.22.69.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3c8f4-9cab-42a2-a14e-e3040c92edc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.237.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4320320-eee7-45ff-9ab7-eb51301c1c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.41.184.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b53f09-521d-4262-aca3-0123a93221c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.84.250.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d11d2c9-8945-4d0b-8ac7-7cba66373368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.84.251.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d65cd8f-fd72-4b6a-850b-223982beccd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6294d3d4-ccb3-4009-89e2-44f40eccc604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.38.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f794f19-33c0-4c6c-9102-b8dfd78deea7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.116.243.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f131b7-fbda-4524-ac37-a05f40d2c7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dd35be-64a3-49d6-a8fb-da9b9b708890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1919a95-d6f5-468b-beef-aa8c30f648d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86b092e-d625-4461-a411-368d8985ee09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a71d5f-9204-42ec-ae42-bb6f86bd06e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135e7067-9b71-4861-a365-117629afcafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.182.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8f2e12-4221-4c86-aa0a-88f156a12a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.241.235.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c36fa57-6556-4a42-bb5d-90975ee23420", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.114.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c0be29-b9c2-4c2b-aa81-d6f341b73c7d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.74.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779328a6-d8e8-4e19-84e6-43e366028a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.144.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef86cbc7-4314-4a33-bb99-9278756678a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.193.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212fdc8d-9003-4a09-a5d6-cee180b93e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.202.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9807569-cdab-4f90-b1b8-24b59c4833cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.217.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41280e4a-469b-4629-9727-d1bac481217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.95.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41ba925-cdb1-41de-852d-95d281bcf368", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.140.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3611a9-5575-4772-b562-415fdf2ad63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.165.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60c0432-70e0-4a62-9b31-be38749a817b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.73.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51734148-dd60-4b86-8641-432e992f0cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.65.251.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330d52a3-4004-4143-9075-baf42ae0b94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebac5a3f-c251-43ec-a76a-88da3cc1a97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.123.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94777256-1ca7-4881-bece-9770599d5793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.0.46.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6baaa8-1ca2-40e1-ad8b-5ed9349bb8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eabb2f1-dbe0-475d-8597-0bf4c44254c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0833fab8-df3d-4987-8d12-b3ed5ef1fb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba472fb9-9eef-4880-98ef-e5f86eb660fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56807b0e-55b5-40f2-98c1-b72fbd08089d", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '130.195.241.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b64ecd1-6f06-43e2-974a-7da899f24dc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.80.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0b6040-de5d-43e4-93fd-b69327148f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.91.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0299159-6130-46ae-8c8d-1a200fa02ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.123.42.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cbfd99-29dc-448d-8162-0ddb307b7ce5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.255.240.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c25872a-d545-4ed2-ac1e-1db0271c7027", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.115.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe488b61-3f66-4fb6-915a-8d910351eb7e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.148.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5abe68-a232-447d-ac9b-68380478bc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.175.107.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf370706-da9c-4bb2-bcb6-e591e1a2d08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.118.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031b6c20-e28c-41d1-897c-ebe6c04ead91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.152.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0370643-c15d-4884-8881-b69818d95fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.168.246.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b1405b-422c-47b9-b839-6383a3d9bc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.168.246.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f40bd3-08c7-4d02-b812-2363961b6272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.175.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caee3e5-a1b3-4e40-aa1f-80c0d9dbdaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.238.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d350ea9c-5bbf-418a-b066-ddec2ed14f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.115.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b3071c-a09a-416c-9369-68dc0156ba9a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.183.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b6af8-fd76-417e-b729-e983a7667296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.254.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c86759-17ab-48ff-bef2-a57c281ab2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0794ab-0af6-4241-89e1-66b1bc458fef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.96.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3897adc4-c224-477a-aef6-ebdbd367cad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.65.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acf8414-bf26-49e6-9d4a-573a7f185cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.65.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edebde1-7002-4c18-8429-259ea4df5a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6de4a5d-19cd-4cfe-bf5c-3f17166e8d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61562ad-3d58-46db-ae78-db12b3738e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd52fb49-f420-48fd-8649-a6f8bd3a077f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.97.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9367d2aa-175a-4ec5-bfa2-b4fc6b6a6d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.17.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38f84dc-435d-431b-b6d2-9ccd155da6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.143.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e87e9ff-df73-4204-98f5-7b8ed6718658", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.29.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c01586-2cef-4805-8f88-44c327349d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.117.82.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194d8c77-6707-47ae-9e9c-6fe9c3bc4235", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.124.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9946cab4-c341-4a8b-81c0-8133d6947fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.232.11.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a69d9-ec31-4425-96aa-7309d49cd1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.12.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a873f5-666a-45da-bf7e-ed17f906a3a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.71.252.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ef4ff9-acf1-49ea-826e-629c61fc236c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757f5d4b-46d5-4c34-b33b-40ac40cd5667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4075ff7-0a8b-4699-8a33-6e52202d0e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e22fc94-d7a6-4eeb-947e-a78f4fb545d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3346e6df-024a-4e55-9e1e-0400b9b8b6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cee0e1f-0661-4c7b-b7b5-40f9bbeff1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf1fd40-44d1-412d-ada4-2df3f8d49034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4f2cb5-2435-4c9a-87bd-03f175dc5058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e874edd-2aaa-4e9c-bea1-4d9024c6caa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.222.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc69b3a1-00a8-419d-8042-4e0b26111333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.199.220.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de1a32f-41be-40e6-87e7-d59646d40cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.67.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ec8b6a-b724-41ec-8cb4-596aebc64ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0592ea6-0961-4dfd-8c89-1bcb1979ed87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b20b59-eda4-477b-bfb9-acb19ec5c8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4d8b86-2868-4155-83f1-4bdcc818c5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdcd1bc-c8dd-48c5-be44-c44f8f33bcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d2a678-936b-4bb7-8916-b9ec751b589b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9d1d76-453a-4708-adaf-5895b147eacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccad5c4-6dd7-4403-a7f8-880b38f24a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc9a61a-a140-4f74-9e09-7333f5b41e8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a13629-cc1b-4478-bd2d-f77729e8f753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.59.224.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fe1be6-92d6-4bc5-a2dc-b64e4bd202df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.108.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c842989-50a1-46e6-9321-82755db583f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.46.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322a03e5-6224-4b8d-ba12-3c87b290d554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a6608e-cd9f-4c16-bdc9-062919772dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af477db7-6e24-4a23-8e60-e58db970c7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d88adb-ac6a-4ee9-b901-339f7fbaa914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badbb53a-e081-4ab4-b263-0187e5718b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6efd213-fbf1-4a48-8890-639a53032aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9f8095-ba70-44de-b47a-c47c0656f4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1d22ec-ef17-4f85-89c2-549ed74eb32c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.119.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b362ae71-ecd7-4f67-8074-9a3f024cb895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.88.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09ebd81-4a9c-4ee9-a388-0d4de8b357e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.141.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcbb700-d73c-4c88-a637-5a2d6731f8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.92.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3f8e30-d405-4ce9-9e4b-f215ec4c3f8c", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.219.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade118df-d70b-417f-9841-0a7d49de94a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.136.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b2a36-17dd-44f7-a52d-017a13ffe480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df77ec5-ccd7-41bc-97a8-6c134ad9677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de39cd4-4959-40ee-a9da-276e7c209cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.201.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4153f0-ea88-467f-ad53-3f46644eb931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.80.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4684110-ca81-4752-ba49-fdaf86e4c9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d63d6ed-6b5c-437a-aa31-0763018c50ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.155.224.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719ea0e4-e362-49a9-8b06-578092239f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.164.5.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e0e421-6fb8-4cb1-98a9-6a5de698f7fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.173.121.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39e2e16-d6e5-4b3f-8cc0-19a214dc028b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.187.166.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc633d6e-1727-4d82-844d-ea0436410aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.160.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340754eb-79f6-45e3-b8f1-f2d2c37c3e41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.193.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f637fb-a21a-4856-b77b-537c09d165b6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.212.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fb451c-ef49-4e5a-88ee-aecc9b33e019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d82ec0-f005-4538-86a6-a558c2bc333e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.49.180.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080dfaf1-8ae5-4842-a46f-819a58201ea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.228.226.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8a6c69-31ed-4be9-be1b-42f42364cb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.124.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dc5a83-69e6-4eab-9e4e-ece5ec6313e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.136.42.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774d9b39-156f-482b-abec-ee94831783bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.164.52.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2946605-ae9d-4ecf-9246-9866b2e3de75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.245.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4f3235-20ed-4833-9780-8f28c74bc4fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.29.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d732bb32-c1bc-4044-8f81-72a4d62dff78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.165.181.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac975a9-f26e-4da6-97aa-a7e01635a5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e0c20f-020f-4f46-b1b7-14e4b2711862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c733a7b-2838-4d4c-88ef-7acee5920e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.136.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2693f6-e66f-4209-b8f4-ed314d27208f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.213.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec96cdbe-c7b8-4c59-89dd-a2078777ed4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.217.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2e5e13-dbc8-4933-84cc-51e383fad69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7257b4f8-a9f5-4121-b209-1e5727633f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.9.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc857554-2fe0-4318-897b-f69ac1ff4fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b184dc-8a1d-43ed-aa2e-afdcfaa494f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4352ba-0855-4746-9269-05e086c1659a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caee85b2-3ef5-43e0-b518-d4230e52d839", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.202.210.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f79fc1e-04bd-4a89-ab48-27a232a529fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d21365-d9aa-4251-ada3-8cc8ce7c56f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932a3e07-c131-4ef8-8359-047f899a5689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40681762-8b76-49a8-93f9-4e56409e03ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ea6291-c095-4a26-83da-b9f4d53650c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb238832-f2c6-49b7-aa18-98f273c9b059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e385ce83-4c05-4519-9c1c-4598f8886331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a98571-8074-46eb-b312-223510789cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca801a15-ce49-4d01-b3cf-8f592d79f694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c421c6c7-e03a-4617-abea-ddbdd34f4701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfa009a-ddaf-47f0-95a6-64811fb7908b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1271d76c-ab10-4a4c-a33c-77a1eef80604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba348495-d3dd-4081-a8b3-f1634a987c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf07e5c9-af33-4a9d-9f57-e093b361ffa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4c077b-31f9-4af4-ae53-6c87def51aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275b0473-1bdd-471e-bcf3-1d7eae8018c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb7b2b8-e8aa-4405-9182-dfeaa310904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2baaaa-9762-4375-8ef9-94fb088c35ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76524642-4aaf-4e61-8482-ddd7aaa9771e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e62d6d-9dd7-42e1-930e-d5318e98d085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1429b045-7f4b-433a-8d79-e067cd758cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.165.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159c57ca-4d6a-43c6-8c6c-240a24bf3ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.133.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111d738-152c-4010-91a1-b81614b29811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1152d9-c9e0-4f74-8333-777008a02d5c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.225.187.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f27d6e-a22a-4d0a-829e-8675f83fbcbd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.146.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d09819-6f13-4a09-873b-1542f29de97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afefbd82-3c15-498f-a9ed-e338ff338db1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.220.91.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a2a4b7-d395-4ca4-8992-ffd96aa1f552", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.255.169.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bc8343-b125-48c4-b496-4033e6d96464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86758d1f-e5b4-4546-9b8a-f9bf58c4103e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d60d0f-8428-4695-8a4f-4b3b649e6747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.63.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac998b35-46df-4b51-9efd-47a917d967cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.59.159.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a66c63-1806-48c6-b440-80ef521525cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d039aa-11ec-4d45-bf47-549f8cf3cc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f97a62-09ed-40b6-8d4b-89580b8c52c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ecc129-338c-4cf8-91e2-207f760bdbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.161.97.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ae6964-8d09-4311-9104-d17313aaf334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76801e26-a20a-4bcc-a9ea-0e3f63fcc31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e8d180-4c1b-4eaf-bf36-6a242d9e0b34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c2c853-9434-41d2-a4d3-6691d45bc359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec84e5fb-15ff-438e-9e6b-9c72fa07528d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c89449d-740d-4282-a1b9-d68e73b1a01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6939aa17-1f30-4ee7-8df6-70bfbb0a7eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c914e41-ecd8-4c89-8d9e-9ef9e82bb503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f5675-e06d-4aea-a991-bd050898280f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cdad2d-d3a9-4d3c-b6a3-4a50e9aee099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d4281a-4735-42b6-be1a-0ed8e9e4aa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56e6039-b6a4-4e9f-bcda-f5592e2632df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3bd604-a6ef-461f-a26f-6e6679041488", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d512f4-3b6e-4f48-8e68-f86865d0dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53c4f63-0085-456b-832a-de7bb34c26f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd88e2d1-5099-4fbd-901e-9b264aec88ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e0d70a-141e-4f76-b716-afd7b3dd252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43ae631-ab01-4724-983c-b34e8328866a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1aa711-a894-4b25-a0cd-d2ae06c0dda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bbc5d5-5c91-4486-b029-03522bd0abff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7a7e31-1b0e-41aa-9bac-7558f6710dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9082be6-b878-486f-9129-abcde056e89d", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrtokyo", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a146547c-9b0f-4003-ba1a-214cf6766297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ed30e3-a17e-4022-9bcb-c4223c46d300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b6355-3400-4b6c-a636-494393f45fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414cd64d-0649-4050-9893-8fc15e7873f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea808f8-7513-4cd7-87ff-04d2ce33902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc3c4f2-4b17-4cf6-8060-3e5300755a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e96b6b-f083-427e-b4b8-dc4e50226145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c10d63e-69b1-4d09-ba99-7fb87b956b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae65be2a-0ba4-4733-ac54-93cee6ddc014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8649ff-88fe-45a1-b844-5b35b772b5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fd6f8e-83f8-47b9-b65c-466dfed610ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b779a63-a02b-43a3-9872-b19dc1097e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d42327d-9c85-4f3b-9691-abde682b86bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f239bcce-98fc-4e3b-b8d4-ca5be5ed8ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02445316-6cd8-4863-ae58-84bc5381c365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b465dfe3-9db3-4e18-87ef-7a819fbb4647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde89b58-5225-45a6-8f2e-2757a15ca93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b4179d-fae6-4b8a-ba8e-ebc779274e50", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b817e31-49f7-4312-a40b-7ba1f91b1fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dede2e4-14c5-475d-9974-c2bf49b05fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd472d2-8b0f-4f7c-b902-2bcb6e1429ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23e9324-784b-45fb-9c31-b0647b39378c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62069e5f-2442-49f2-8fdc-0f0f1316b92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f49c03-7d76-48d6-adbc-6659dfae0be0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79f65de-660b-4751-9a0b-d9a3d694b3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad4c731-9600-4ce4-8fa9-605103688958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1101266a-af99-44c4-ad39-21be2b5984a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1481a4-09e1-4bbd-9fae-c6678169c901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcccec79-3542-4bf8-84be-3e69790d8215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c5d67-4814-4251-b394-c67c7442356d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4897b1e2-186b-4c71-b02a-3159a0eef6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aca5f8-c84d-4421-9875-d3bbbb6d5040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0b89d1-6364-4727-bbfe-218074a919d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703a122e-f245-407d-9801-fc27ce8a0525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efd4291-d871-49c8-9e78-b214ef682090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12366fe-bb21-431b-af3a-6b352ffa97e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4617448f-4884-4435-851c-318088521432", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb7704d-c479-436c-9966-ed0e159dc445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e959442-9ee4-48ee-8017-114f68ca679c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e135136-b5da-4a2a-9a4a-4dd863a4e1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa505de-2ec2-4677-bfec-7b50ab2df2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818d984e-a0f2-4e6a-a6d8-88d1369160f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a7927e-50f5-43a1-b5d5-0d61b4ad2bc3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dae35bf-1255-4534-a355-9a286d6f6ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3896e05-0903-490b-93ba-2296a9b74460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b569da31-1128-46ec-a229-6db86cd8a350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6860536-87bf-46ce-bfa3-2200f6344054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79aa39e3-0445-4114-a997-bb6764c3cb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109e9558-e518-40ee-9d0e-ef3482636668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c681bef2-3595-4b35-adee-7bb0f954c04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2d8307-698b-4b50-9ebf-d491280ac521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6beacf0e-2a76-4eb0-809a-ef63b9868206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7eeed3-ce7c-4d8d-9b08-16f49e228c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b2ba9b-7cb9-4053-ad33-fa8784981190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28b3f03-446d-4017-a652-09535d9f2678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2b7013-31f7-4527-91da-0c1c289cef05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c5ca24-71c0-44c1-96d7-534a3767307a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a0c537-49ba-457e-b5aa-6c885d645004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fab6fa-f95d-4526-b6bf-4a8c73d688d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cbd538-0f96-4037-8de1-7e5fba85e620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ca99dc-8486-43fb-8806-44aca2379ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb6bf71-6685-48b0-a4f1-a2db3955b639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01772c1-6ee7-4948-a189-dc25d5b117a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e160579-9424-4cfd-b768-86325c990f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689ba5e8-0018-4747-b03a-9f72f5332f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c031d90-52c7-4ec6-b093-2927336355d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f751cb-cf4e-4719-8a33-e6b8bd049e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277da7d0-3ace-41e3-aeac-010236435934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f304d9-8c71-43e2-8ff8-d79b9d1d930b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47361dcb-075e-4ab9-a6f5-2f2cfe2c567e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba42613-3e63-4840-8626-e2db4925df4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63358c19-9128-4332-8936-7e31d72566ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c5cff5-8210-4889-a951-d71b864a62b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109ea2e1-dd2f-419f-9d72-fb4f95ce3a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa63a623-c3ad-4900-b95d-25a032b4e2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf128c8-e29a-4324-b47b-44d9d5c5e590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8582da7-469f-4c41-ba97-14a99b7f8c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95e3221-95fa-4a4c-a39b-800d418d0413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0fee2d-ef04-46a5-8f8b-0766a32d448b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d37516-b0e8-4b5b-9fa1-ff8a7b43e83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623b9c13-375f-4f89-aefb-8c498c90ad36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74a4c67-1780-4d57-810d-f692f031c543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42acc950-3ee6-4325-b6a4-b9f5cc4597c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50508489-312c-4879-8371-c2d5458c20c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba682caa-8fd0-40a1-8cbe-79f65b62aae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd733e99-56ca-45c3-937d-5f9ccc9779df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcd7a03-a0a9-42d9-b025-a46046016814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b499f875-4283-4297-b6f7-88213399aefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958b4eda-ad6e-4e5b-a9b8-b1ad8a37e8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2319c022-0077-43f6-8313-37c45ba42706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bdc06e-f5b5-46dc-b9b9-5b7a3ff40cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f53509-af69-449c-be16-1ee01fa0b37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77df2491-2660-446f-8b33-0a97c46b4ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3b2ace-c089-4054-9931-db0612c663ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7933018-10ff-46a7-98dc-0bff5278ac2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b854f917-df22-4aa2-9791-6e26982cd012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d08c61-e824-45b1-8566-6348022c10ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d282a18d-a37b-4176-853c-d09dcc1708df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbb5c57-03da-4377-adad-d2a379c46a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866277fc-5c12-4f6e-9447-a662c0f4ff37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2094d9f0-4556-411d-b053-c73675f8d938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22c8b35-1037-48ce-a38c-099fcce2e038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dac1aa-67ee-4f1f-a01f-a30a926be07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683a3e09-1e19-4de5-a99c-e8380bb6fec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b755b4d-912b-4fe8-9735-459495ad5b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8721f2cd-2245-4861-be58-fb89e1424ce4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.235.223.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de4aac5-9d71-450d-a14b-c1dbc877e33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee170e9-f392-4fca-a496-0a474713cce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.159.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdafdb92-5f7c-4605-b77e-e580cf18189d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f305693-f898-4179-86cb-dac30278eb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87ff933-5a8b-4d04-b232-6abfc99dd062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a2e4b8-7563-4f7b-8a1a-98d87b2ee736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b136025a-ffc5-4b9e-9c0b-016197a1e74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea958de6-7c43-4a84-8707-3a7aa5aafec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdacf2c-3d63-4904-967a-8d02e8058d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.77.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee27ded-0d26-4d99-a770-9fd8f1d15b89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.118.57.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bfaafc-9e71-48b7-a49a-986584318c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.40.54.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9c6eec-ad96-4a82-aeff-407d550de648", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.200.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716a7dad-11d0-4f03-82cc-7dd0a2ae4f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.90.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebeb62c-8735-417c-b5b6-5b085bd3a4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.148.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd33f79c-2958-4dfd-a70d-051124e13db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.160.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f813ce6-a871-4314-9a17-5db299fc052e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.160.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3ff586-f0ff-44aa-af8b-304175fda3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.165.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed42e41-699e-4f6d-8c08-225656e29392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.180.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88b925e-ee52-4896-9829-7dfd8f618e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.180.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cceb33-a36a-4423-acd3-9f39e30c5011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.180.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecbd1ac-e7ef-4f5f-b19c-75b1e9023ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.180.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e21787-05fd-43d0-a0a3-67a4b87d4ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.181.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ebf694-b3bb-4b64-a28c-96d38d0554a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.182.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5507c53-61b9-4004-935c-61cf480dc790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.190.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d03a9f-d9fb-44ff-b881-b488d8e0292c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.196.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad75c838-04d4-4ed2-bb84-8d0c0e84d957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.204.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95de5b4-dbb4-4b3a-9c74-673dcefe54c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.204.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4847b8fe-1100-412a-834b-abc1f96fbf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57882e38-682b-411c-8de4-23943cdd2d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0b7fe7-7ec4-4dbb-a982-8e7d80fccad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.20.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3bf5b9-317d-477c-b8b6-8d6b8fd5a5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.241.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d52205-3212-4b6c-8d74-9a0ff6b6a0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.247.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc99b373-9737-4611-aae6-7f0574a1885d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.55.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e32f61-855b-4b8c-9215-47974306221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.82.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3300f3-3375-4cb2-9d9a-00628d5824d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.40.242.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f804e8-a202-4c4a-b236-c1f9888709b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.128.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a8c127-e058-490b-9cd1-3e5e8b01d2f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e7b2b5-8a04-4c00-99c9-267cd4527cb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994c1957-a1eb-4b0d-8a82-92c069fd97b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a58268c-0f6c-4139-aefb-131534e50977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.146.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8632c638-f65e-455a-abd0-3793c7c2583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.98.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22323735-078f-48e3-b921-dc06e6506cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.232.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab82ed7-6820-43d8-9234-b3529b2cf981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.233.30.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b149e415-8a65-4fce-ba4c-b97eaa2918aa", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.236.14.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a6a4c2-364d-48cf-9b72-b9441195399f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.249.214.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218c8013-b4e7-47f0-aeb1-17687a2dac5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c10b11-5762-44b6-882b-bd7a15b0968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adc042c-fa54-440d-8b93-8f49923cc0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d6457d-81d6-4dd5-9c72-363532921e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ceacab-1beb-4943-b6bc-7bef5449220c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb81770b-2e8c-43ab-9dd1-263b78972203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0c3c95-60a0-4321-b7b5-f0d7a16b6202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e05130-9a0b-45c9-bb7f-30cf8f190314", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ab6937-81fa-4642-a557-7c0527e5cd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720389d6-878e-40b9-9766-9b2c37ff19ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7660cc-cc1b-4d7e-b1bf-6ee5adbdcb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93576209-6b05-48f1-8546-b35692515030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af00278d-d71b-4f11-9077-70c64b01b027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77335af4-b119-44c1-b2bf-20d1056db7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d3c54b-334b-419f-b27c-81cea72222ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefce0ed-65bc-49cd-9c48-6daa58c5c78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e16610-4292-4770-93f7-2764fee52ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9774de-67e7-4a04-b347-eae56727d975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3368da7d-50e0-42f4-a5ad-53711ac7ba7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f729e-4a9a-4349-be8a-fb2587eed188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b6682-7bf5-4d46-9eea-ed4256219844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67fc43b-4b37-4bc6-8ca7-8d4f012cc3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43856615-29f8-41f6-8d18-0dd2c2a37a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a72d402-9a8b-44bf-8a75-829f638ca272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc07e42-a58f-4210-8bd0-af6c0fd28d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe72240-56b3-42e5-89ea-dd04fbca1dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aaecd6-a9e4-44f0-9151-537d3539d26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1564f8-2da2-4d0a-b349-3aacacd7b2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418776f5-da4d-4faf-9c52-9b2ae923aaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6b9582-5bb1-466c-b763-bd1cad2d311e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671ac13d-a4f7-4de9-b183-a8b4516f2972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6172762-7c97-48bb-b327-ed9e250b2117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c53752-f188-4e7f-98ba-2e976850ee90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0f601d-36fd-46d9-b7d8-76d28632a83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d890e71-7a5b-452f-9df2-d3068b98cf9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.190.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc861227-c586-4ae8-a2b8-eeab1b4eb4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.89.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec72204-db1b-4108-8997-046a376cb4de", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.108.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1f5511-3b32-46df-92f7-11ce8688eaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.89.170.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3490f254-12fc-48da-a071-961db9798717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404ebc79-2f4b-4d43-bed0-0af365e7f90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab818596-bc9e-4463-9da8-eff6ae31fc94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.17.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34587b02-b32c-4218-a126-e31572130308", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.32.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5be5ad-ee24-44e7-b5a5-0afca495413e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.37.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272c89f7-6e6c-4cd0-bdd7-cc0d3e7c05dc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.38.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b314e1-c81b-4a20-84cd-8a6004af3098", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.46.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d98fb80-6d9e-4e64-9d13-90640cc62692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.164.49.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b2e95c-e3b1-4e0c-9a0f-2f4a28dfe043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.205.139.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d6d82f-7173-4161-a8e4-4e6ed57b1b7e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.217.251.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbb8dd0-5679-40cd-a859-df983615b20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.223.182.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64c7711-24a4-42ec-bc56-b721997283c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.27.140.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5e8697-0784-4211-a690-8b36b154fb8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.51.84.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98c5a62-47c5-4e0a-b6e8-f4cad89f13da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.110.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d81519a-6ed3-4dce-b370-cffe80b7dd3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.17.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5413f05-aab9-4d37-9c94-599989575d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.133.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbac5637-99f1-43b0-a951-4e009ece12bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.22.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d04eefc-94df-42da-b0a8-9ed54c8d380f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.133.26.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716ee04-25da-4eb5-a70d-f6ae8a194b06", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55db2319-0f64-423b-bafb-40f7c66e8397", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71874ba4-d402-4830-94ef-1548d6437ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6701fcec-a344-4cde-8c1e-dba4203ee415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74687d10-c8fb-43cf-986e-2283f74b5298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfca746a-82ea-4ccd-ae5a-350c46110774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be16fd-9c95-41be-895d-d9c9887dde4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.17.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b20a8fe-65a5-42ad-af6d-08872173e6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.251.17.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d997984a-cca7-4bda-a913-c50965687d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.255.1.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0642fb93-bb88-485a-843a-137a474ceb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.59.197.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abccb52-bf8c-415c-b1a5-00a8054cb1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd01edc-2cec-4be7-9702-0fda17e251d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4762e6-832a-4d1a-bee6-1a574bec7971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.119.71.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa69ed1-72cb-4bdc-ac9e-600e2c7b62ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.22.45.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b0ba3e-f33b-4b9e-8299-817f1d5777c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.46.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446ca1df-04ef-4157-bcd0-80173802f918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ca91f5-c992-4d3f-9c1c-b663ea5d7402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.72.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b656637-f5ac-44a4-af1b-71dff5a83d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.198.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833b1952-2ac6-4211-9170-c6d2981a62c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.89.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0833c4b4-5e6e-4ed4-bccb-1f81336d1274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.105.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82226717-e022-400d-803e-018b51404848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907b1026-b478-420e-a0c8-e8c389f8a70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e769907c-3c06-41ba-b712-9562c1951307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9db50a-19fe-42a9-a522-689f0c8aedb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e459e6f6-3752-4a84-81b3-92c2d5ddade2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05cbbc8-7fd8-4134-b712-625b9bec165f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.247.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac7532e-33bf-4b77-b8e3-46b5e6c9fc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.132.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ee4bd-0de1-4b6f-bf14-088264539090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.149.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68472f56-9936-4675-b1c0-9d8024c88b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.97.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e287936-9a99-41bc-8363-f94424882756", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.224.229.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abe349b-5d9f-4d65-99a3-d97a5aeade18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.226.231.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28af1b61-8315-40a3-95bf-68b35e7002aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.204.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147d9a29-f839-44a4-a153-bb3f12530b9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.88.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9f2337-994e-442c-98e2-cca5ad398689", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.123.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97085af-5d03-40c0-9349-d0182c4ff2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5846dd8e-5d66-4a61-b16b-1c61d85b4ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0126754f-4d64-4d48-b593-f557b7a98299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71ce040-48a3-4ecd-95eb-20b5432064eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042d157-efe2-4ce3-b824-2c6cb2e475ca", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38dd74-0ae7-480a-bbb9-b5c17b06de68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ef679e-d351-4cf3-82e1-c057f8b6c200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de8f296-8e72-417c-a0dc-c194c8817f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbae606-b798-482b-86fd-f49fb580841c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aa260f-76e2-46a2-837c-25c806ee6eeb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a4f594-4b16-46dd-9306-9db937173f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720a6526-a76f-48ba-bcb9-75ea298aaee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.20.117.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51232072-894a-4c88-9cbe-c07438dedf77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.20.35.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a91fd4-a9e6-42f1-8855-f8f298ea4a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd1d817-6ad6-45f1-bafc-05a3bb932a9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.239.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47689f33-63c6-4a88-938c-4647873f425c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b7672e-907c-429c-a616-656b031d7fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c632a390-3a44-4a39-8daf-4db8a60433f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67996e2a-3dea-4be7-b4c8-987b477642f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f83ad5-8301-4fad-99d2-534316c2997a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96748a69-3848-46e7-9590-b5e82637709b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e3edc9-3329-484e-8bb1-749d397b6baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b51f99e-1bcd-4a2b-9885-b7f1e1abbf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2537c1-8b17-4bc0-97ea-5fe8b207f146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525eeab3-8a98-4895-be0d-b0b95bfc0a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4f050e-4db2-4b84-80d7-60573a03599c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8e0830-fdf0-49e7-a77b-6fc05a68424a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e6a2fa-4e04-48f1-9717-b7b998f1f429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d2344c-fec6-4304-b9db-a7f8a8d70a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6283df4-13b7-4a12-9f6c-ee9303575852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c980a2e8-b534-4356-9cb1-08caec87c68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f16439-54b5-4a1f-a004-52566482bb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efac461-a1c8-40ba-ba3b-0731f19d0410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b3b483-8fd1-4ce5-9df8-7c6797513021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31b95b8-2f16-4037-832c-7783d6a535c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17081b2-be26-40d4-b2ee-ad09234a7865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9488c63-f81d-48a8-9f8f-0ccef5ce1027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bce744c-2aa1-4187-bb1b-3d63db11a67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b78a62-7de0-497f-9c35-a8fedf8ed2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d52ccd-34e7-4b04-97c0-449c6a790f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59bfaa5-ba3b-4352-8c79-a1c9488bed44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79d07ed-60dc-4487-a74d-1346418740f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0b4ea8-b0bf-427c-a6e1-1211e91d9a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885f4a10-eeea-44f2-8a26-c27598ee191a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ab70e3-85e5-4df1-b01a-ce4ea1c2f43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799a7e8-e8c9-4428-b28d-11430a1dce15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56a59e2-ee2d-4b28-ae2c-d600cfe16c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d56187a-c327-4b9f-a356-6b6a2ba272fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3790d3e-dbc0-48b4-8b6d-563aa6ec31f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487f13c8-7785-46db-aedd-0b1f9bbb2474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fa650e-2426-4b24-a991-97602ebfb8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a4445a-32b4-43af-ab68-727048a54f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879366ac-4e66-4d42-a843-c7d5106598fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23595873-75ee-4868-9daa-7a2ea0c53a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b4c9d-7758-4012-8fba-002bdf583669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f8bdb2-cca1-4a50-b827-2ad7bdb79f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca03abdb-f957-4cce-8f97-ce4af77d70a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3423305-e727-4d17-9ab4-50744dd3eb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8afa80-26b5-43f9-9893-9657ddc9af0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5956cddf-1cde-4100-8ae8-4159343a4dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d9cef7-09bb-423d-8ea6-9d38aa97df09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8472e3a-97c3-4246-a535-57a45757a8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dc1390-6820-4e76-8063-a47ef3d46570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084d2f93-5d40-4b50-8a4a-8d32498d48d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2c0734-1830-4527-af6f-9874f4e68f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fef5643-38a8-44c9-a32d-69ecd32a7f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eba6e3-8ca4-451e-b0d2-928c891d1e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d716ae4-5272-4fa6-b224-128bfa8c564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f8a060-5eeb-4b49-af13-7b935b18d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c461ce7f-32a0-432d-b625-9a0e6127a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d1c159-e754-49f3-a7d8-4a100bbc23c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e528aba-d940-4fbf-b3bb-d53f19336840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ca541b-cb2d-4d61-b7d5-0b6453016c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22fd72d-3181-4d26-83e9-7c20afc3225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d588444d-4875-4555-acec-4e274f94ed1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da011cf4-abe8-4495-83da-21fdbe3be754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f3c44f-33a4-4f49-8586-f77c28426513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d49115-3f1f-4dca-9d25-a1ffb87bc22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bdbe22-0cb9-479c-b824-61c176555031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5461f16-982b-4bfd-b2ae-104ba28d9a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9990c769-fbbf-4eb6-8367-cc05ddad8f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454190f9-5402-45fb-822f-e22801abeb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72491095-e34a-41d0-abc7-2c738a6dc7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94950a8d-6867-4f64-8ef9-5e43f268169a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0250b4-2dc7-4363-9bc9-c9653b2e7e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26be735e-140a-4eb9-a6a9-ac5adf3956ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0886d6cb-71e2-478a-bfcc-cf09d702bfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172dd0c-6eea-4cad-a90e-8b31579774ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfff82b5-4aef-4d84-aae5-82d402f91fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529be6df-af34-448f-a140-421b3f8a72d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1b174b-2e00-4302-8bca-facccd14601d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead162c7-3c6d-4620-8daa-688ffb3b9725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce05541-98c7-4dde-985b-890264fcb71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3a9ef6-d6e7-428c-a021-7cf66458b0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c67fe2-61b3-427c-a6f7-599f444ecbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d899c8d-fb16-47a8-bfe1-bbb87bf6cd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19c8606-3fd4-47d0-8f4b-dca67dfd5713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b520a8a-c790-49ba-bcd3-a1660770c50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19984488-8d99-443a-ad8b-398913015641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0c3f17-b0c4-4b96-8b75-6d8fb96cfcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400784bd-9a97-4710-93e4-5bc7ece57420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94868971-de9b-40fe-a3de-c30db1b6d0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f111ae6a-e821-484b-bdf2-002f43ef660a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d1fb30-2d5b-42e8-8733-977620beba41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2c7d7b-99f3-4d5d-954a-3a892c35e14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97a6fd1-021a-4d90-bcdd-4d972a18eea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64879a6d-cbb0-4e2a-9a81-730cf031860b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810b397d-3c41-4fc1-b327-4a64b7aff88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3291848b-dfae-4c2e-adf8-35890635d292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c3e8e2-88bc-4624-8ffb-4c9130e8c3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd07993d-da6a-46d4-9f7d-223237e41a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b901adf-5769-4397-a1f9-2a7455fe19f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15957990-b1b7-4bda-80a8-f3eebef98664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248cd1ff-816e-4937-a60f-4c449599a00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990f6057-6262-4c5b-84ac-95aa795ed0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23393b2-2495-4466-ab89-445f01e9d479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719f9bbe-78c5-464b-86fa-512efa7dca4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6e675c-4777-40f4-be80-0db4aadb5474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1838ffd6-e67c-4401-bc81-c59f927bdc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbdca2f-3b77-4bd2-8aa9-9beff21d9127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baa585b-9aa2-422f-9d31-a2d84e686bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee272bf-4f0b-424f-8e06-e106648b494c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389df237-40dc-4684-9456-71e87cd50eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e567ac4-5f18-4b98-8d88-85db6dbdf4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b715a59a-1e50-49cb-be07-d2d78ec87ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04827c4-9467-4348-999d-ee3ca3ad021a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d36e77-a833-4519-b2aa-da07bde099f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.248.52.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fa7a9e-cc5b-4f6f-bcbb-bfb908bb9b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.35.121.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eefc0b3-f9e7-4fe0-9b53-3bf156f4a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.172.105.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad6115d-06c3-4b85-885b-3fd4d07f8bce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.227.96.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d087e35-db6f-4624-a732-e59147f008e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.1.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e283893c-423f-4207-a641-c1450cb47f58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c943ac5-f047-4a86-81e9-978b09135660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8699f45a-b980-4bac-8539-5c9a5c3fc731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.207.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86c7ed1-2135-48c1-adf1-228042c9139b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8360396-0c2d-4357-86c3-8fcd971df1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2ac4eb-3fa8-4884-8a43-6c84229b7cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.225.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2df72ff-9379-4db7-95a0-7de72bde36b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0468c7e2-648f-422a-a0e5-41f96b7c2145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.65.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff93adc-4afc-472a-86aa-37a3fca3f993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f968f840-70f0-49c3-a2a7-b87732dfb915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1018710e-d7f0-4b62-b990-11a9747a9c98", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccea6e5d-450d-4865-b22c-df22db06d5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6388b15-a05a-47b6-af12-4d403c1c1a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c6056-7919-47d8-a0cf-4636dc0ea616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbfd294-3574-403a-a7e0-12de7a07ac97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d8cacd-d84b-4786-b98d-da229f6fcc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77507a8-fb25-4937-bebb-5ff635fc89b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.132.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5059209-a0b0-4812-af09-cfa6a73d64a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16446ca0-c05f-43bd-a947-c53dd65d1512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1fd858-912a-484b-9bd0-8c74fa2bc86d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.156.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56faffd4-3bec-40ba-8ef1-91f789b692ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6c1bd4-8b5a-4374-910c-c213b3d84040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661a5642-9293-4627-af69-5308a21095bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818a0b04-7a8d-467c-9ed8-91dd5daed02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9176bd-082d-401f-b342-e24e370332ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3e22e0-74f1-4e34-bb59-1bf02784b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8ec1c2-f1e3-409b-8e3f-ddb21eccdf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce93b96d-e420-4caf-9b4e-ea7e7ff9135d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a2989e-c219-46b0-a3bc-02f4ab347e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.222.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed22ed51-b8a7-45b0-8186-47d0557ba50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb02925a-7990-47b8-84dd-a3079ff70697", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.255.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b0111b-8b36-49fe-86a7-13849fda9f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fe4bf1-b030-49a4-ab28-4360164eaf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870bf979-62f0-406f-ac76-12758d02cd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371f5ea9-a793-4d37-9f05-d92caa42457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1a25b9-0a50-4864-9ea5-0253b1886067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f779d4e-2a32-4230-92b7-9ae0ed610717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.60.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087a4265-5610-4df8-9445-f7fe105cdb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.68.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2778818-bc37-45b7-9443-6fbc5405c5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338b82f0-250a-4f51-a066-5af629709d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "name": "Malicious Host", "description": "Web exploits: panos-globalprotect. CVEs: CVE-2019-5418, CVE-2021-22893, CVE-2024-3400. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22893", "external_id": "CVE-2021-22893"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "external_id": "CVE-2024-3400"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69930abc-b193-4b22-91c0-af1dca2936a6", "relationship_type": "indicates", "source_ref": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "target_ref": "attack-pattern--2ffc85fa-0cd6-4fd6-9c4a-e996c49ea16f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0da8a247-1913-4ed3-907c-3869a54b8a07", "relationship_type": "indicates", "source_ref": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "target_ref": "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8de2af2f-f608-4c16-ac6d-29d0c34e54e4", "relationship_type": "indicates", "source_ref": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "target_ref": "vulnerability--3f194e41-a7d4-440c-acf8-848baf6a2def", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b69aef2-cab7-40ff-a44b-d019204088f0", "relationship_type": "indicates", "source_ref": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "target_ref": "vulnerability--5ac02e58-af14-4a17-8bb7-f2df093f2933", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46a938-6032-4705-a49b-51e0ac084ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.207.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633ed05b-330e-4fb9-851f-0f62d881c38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.158.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e45de7e-9cf0-4b4c-9350-ad7a7155b56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.175.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.232.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d607610-20a8-4f2b-aa5a-593cf4788665", "relationship_type": "indicates", "source_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "target_ref": "attack-pattern--2ffc85fa-0cd6-4fd6-9c4a-e996c49ea16f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--301a7c32-664a-4929-8094-7ea069191082", "relationship_type": "indicates", "source_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "target_ref": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aefe9eb0-0758-4ab1-8383-63fb9f52d7bc", "relationship_type": "indicates", "source_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "target_ref": "vulnerability--e3ed0e0f-9b12-4a57-a12a-912dc1197970", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fac3951-40be-4820-b521-87565758a6b3", "relationship_type": "indicates", "source_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "target_ref": "vulnerability--beb37bb1-2149-46a0-97d5-aac1bfae6f50", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55fb2427-bfac-498b-9c35-a0b1ebced0db", "relationship_type": "indicates", "source_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "target_ref": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edce2503-0968-490f-8bd4-62c4328414d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.247.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084dff9f-3705-4344-906a-2f286e2da39e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.253.16.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eab1e95-9d87-4bbc-a868-1ecf28f0648e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.92.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a22ec05-af47-4bfd-a61a-4eef2e974fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8342c169-e00c-402d-982f-45ed4178397c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cfe0a6-ef27-4b8a-b9c8-e8b17c0c090c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b916ec90-3042-4656-aaf9-e55d75a24d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99f1955-b547-45ed-b487-0877d806c713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe900c6d-5674-4b37-bf69-56f77b77b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf33eba-9809-4a1d-a085-6bf9ff31579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6187189a-1b6c-482f-a40f-ae1e929a2487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf82923-051b-462b-8f07-749f205426a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ca241d-44fb-4931-89ea-2c9537dac8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd904a3-331d-4458-adb0-d6ee035ca540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3daad2-7643-446f-9520-508b3eb289cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910f1ec2-255f-43d0-b6ee-e26e9ec8968d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0e84a1-3e5f-4fee-a910-4b84e35bf70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b3ceec-2433-452d-83d6-b2b82b132b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efdc4c0-f138-4dc5-9486-c42a29a02293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57098e40-976c-45ff-85a5-ea24b02370a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.181.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40dbe1f6-5c54-48c0-9334-5e2716aed316", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.98.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b08277-d8cc-4a27-b63d-1cd80672bb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1372e1b8-56bb-4b4d-bdf9-af4b97374376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.170.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963f2c87-51bd-434b-a069-ebd45f9f9c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.170.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bccf68-2c14-4810-8432-697fc267ff55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.173.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a46e80-915b-4292-9f4c-1ca4f8b32574", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.47.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592bd05a-9822-481c-9af9-050a3caa69bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.227.167.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427478f9-a0a2-4c04-a25c-5a0f40aaa0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.128.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbe0c39-d673-4179-9b60-a5eb98da03da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.198.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099c4ade-1f35-45f9-b456-44e52113f47b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.40.142.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271a2afc-863b-41b5-969a-662c7b8bee74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.124.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1885bb-1425-4290-b07c-80a7feb6c3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.180.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec78234-ea19-4cec-bf75-0b907059e35e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.166.235.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4246118f-6b64-4d37-b8c9-d8bdf4f4f8cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.166.236.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf8f6e9-1bc1-4ae7-9a61-8b0609e31676", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.166.24.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f814c0-5f5c-489d-9acb-fa00300664d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.140.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fac401-1a6b-4961-bae6-7fd977ee643c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.150.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf11deb-8ffa-4170-aeeb-b1fec0ff0a8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7b9c42-b7a4-42f2-b295-f8bae1f96513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.187.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55838749-335f-4d76-bad4-88cfe7442d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651fa742-7a00-4c95-8e46-65661038e65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df436d65-9e01-4e2c-89ac-5673e89b3608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2cd049-e7d9-4a53-8018-12949f0d2d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e21fe4c-f62b-469c-a8b0-38ac21a8bc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a400e27-85a5-4784-ad7a-3fcc9a65a299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91893f96-ee3f-4fe3-8564-885e67ca57b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7e58c9-a7f4-438d-85cb-815f5a567257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f626a7-869a-4184-a220-83882abe4695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.205.24.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9924071c-8f91-4520-b0b7-8bea2aeca90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.137.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4a825e-ed14-438c-a093-706f9e7eaaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.139.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07f1ee8-a4f7-4a77-9bba-302f1be3b482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.143.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e765824-cbd0-47c9-a560-0cdd9aec304e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.169.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf12e79-8b31-46b7-8f5d-f01c7a7e31ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.178.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbe822c-3aea-4657-980a-380a9ec7cf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.185.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6bd1f3-4876-4a87-8f63-d5b107d531ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.215.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa87308d-686a-41f8-9053-0dc906980b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.220.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834aa40f-dc69-4c01-b52a-f085a3d2e85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.236.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312f794e-c484-4a8d-a13f-b87f1a551a17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.61.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a1fd84-0470-403c-83d9-a949ed4fba92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.10.235.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a424a0e-8938-46a2-b812-d2f59285e80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.158.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157a3118-54f0-4026-bb42-ed8c84762793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32fcb4a-29ff-4569-9b52-be7afa85582c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.16.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac48d7-253c-4a3e-ad8e-23b31f44e6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596286f-6150-48dd-837f-630550a8d6bf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8e0c48-db8a-4c14-88fe-df12771f6aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4294b089-52b6-4874-959a-d9a28ceddead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.235.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c52bf53-8aad-4091-a1eb-044a56521d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.235.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb9572-da20-4bde-9161-93c80c982f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2878e9-6578-4ffa-94db-e625d6e28b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.240.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c06f009-7045-4078-8601-72f847283b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.116.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24ba0d3-d463-41b8-b9ae-5a7ee84567de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.243.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6669a9c-b285-4bb5-aed3-a0b26c31ef22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.8.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbe0c75-abce-4125-b6be-e7f2d80e395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.10.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ada130-f368-46cd-a6db-12942d113cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43c2cc7-0a69-47ed-90a3-2c02463c7777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dfe81f-c820-4c40-a916-568b0e6ab149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416bdd24-1612-4ff3-a203-e17e5439d376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faae18eb-47ae-46f2-a6cb-30dad20d8e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.58.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f01e909-f718-4695-9d21-8b4a44d33a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faef603f-49ee-4eeb-ad5d-8a93dd2570e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fa9af5-ec34-4bfd-ac9b-70be154a1912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0260677c-fdbd-4c1a-aea1-937ec3f6b07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdb3d4c-4d47-4e4f-baf6-a46a27a31948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa36bc58-830c-4a65-815c-36cd0540087a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4f623b-15a0-4685-82f8-95a2b2935f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7edb4e-ca85-4d66-af12-dde6fc8e27e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8062a73d-16a9-467c-ad72-2926ff5e0062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80c4a3-90e7-4a8d-84d9-5b89695a4dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c430b7-9f16-4c36-a48e-cf5d8d335f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa3b905-5f95-4b3f-8894-b6ca1549bd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2870a12-37a5-47cc-b61c-5a562a7716f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5abcc50-60db-414e-a5c1-aca9a4ab485f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32db010a-8794-48f9-8bea-06733e434ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ae7e88-a5c1-42ce-bb98-8cc1c57b1fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75870363-be9a-405e-9067-b9c5118cd12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c3bdcd-1860-44d4-b5cf-c4792310b7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96fc882-2011-4f0d-9102-79a24c8b9761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2e8acd-be29-4c33-99b2-080dd332d9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2924f7ea-4d8c-4171-bf33-20f75778844f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c7223f-d8cf-46ac-b6cb-f9d2dd196f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea63717-1892-47a3-a7e7-95c435d21545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f657351a-8411-4a0e-8fc7-351d37ad8ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.103.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ec8a3-e185-48b6-86bf-9b08f6a3bf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb03b049-6c3c-485c-b74c-6b47ff3c92cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f1446-9357-4517-98a4-0d8c85c836e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc06b66-5581-4a9c-828c-4cd1f8991b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbc2c9d-4398-4ba9-83e9-aa326e2c0051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16ef03c-77c2-467e-8112-d3612070c76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0917a68-1d6c-470a-b226-ad188b8aa850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c647aced-2b65-44ee-a680-5a58dd95c782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4889dfb4-26e8-4122-a5c0-6fceacfd981d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b472069e-96e6-4cef-bbb5-f8c97b98a9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c31ffea-18e7-4c21-bf8a-524ca1860d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4b1427-9e0c-4f05-836a-3c14f3a047a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b7e5ad-ba8d-489b-8553-542c23a12755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a311c9b5-be63-4137-9318-2d0ef7ed6f42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.117.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b9ec7-a85e-4516-b07b-c468bb881952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b717ed-391d-462d-a082-c9e60c87816f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64daabd5-a6c6-41ab-ba18-9af9443ee985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5785315-d9c6-413b-8154-b185f439396b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091737f7-faae-4d0a-9a06-4bda9d672c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9763afa-c3f5-4f55-9660-2bcd49e66d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec139ccd-4a6b-4bac-ade0-dcef4030f9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0de3fcb-935f-4868-a5f5-0e302ea36e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2718c82e-0b52-462b-abe6-020255f7f0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d82954-8d99-4ab7-9864-b9f868aaab62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e269ad-3c39-41be-b5e1-50fa268adb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d917cc-37d3-48ae-979d-c0f5deb3f351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91ac9e6-a2db-4318-af3d-d36580d89dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d1b003-480a-4c85-b776-9bd6454c4535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1744b95e-eb81-453b-b233-aaa249769b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7c1fec-fe87-47d4-98b3-2dd0308d0e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9407f79-9a70-4100-ab3a-e82b8e4c3c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.147.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6c9048-fc37-45d0-a7e3-33e359451478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.18.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f34fcbb-a082-46dc-98b3-05680d5997c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.81.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383ac164-d7c9-40a4-95d3-612b6d7ef316", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f767c2fb-24a8-43fc-9ad6-3a121995a7f0", "relationship_type": "indicates", "source_ref": "indicator--383ac164-d7c9-40a4-95d3-612b6d7ef316", "target_ref": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a505056-f988-4de9-9028-a3d2aa45b6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096b617f-cf50-4c95-aad9-2d676e81a37e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.171.173.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbe2428-e4aa-4dd8-925e-eff8fcbcad42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca4f231-03cc-405d-af95-0d884d87c3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cfe00d-b964-4822-b133-35235ae8e14f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.175.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641173c0-4156-4a8d-8165-9a2809cbaec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f45d0d9-2edf-4eab-a326-05086ebc240f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8647caca-7ed8-4b3c-b125-de692f01c671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4751e00-61dc-4f9f-bb3f-b4646b5d7deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43f1010-42ba-4482-9c71-7564d5c7a59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f165eb-75aa-4263-983f-c84f96ae9611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5491fb8b-4452-4884-a9d2-141be3d40950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6077a79c-f3ad-42ae-9669-63193f4f4fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e549730-469a-47c0-be19-a23ab7327011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3530eb8-1326-4349-adae-92fab621fa13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34b3dde-f1dc-4611-bef5-5b899aef3728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.249.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ad37e0-a298-4082-aa09-d62678c73092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.177.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e1c09c-e82f-4575-a189-1d8817581b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.49.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bf96bd-4062-498e-9cdd-4ad59ef95d55", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.198.62.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953fa284-c901-40a8-ac2d-5ee413815b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dcb6ea-7145-470b-b3b5-fd74d3a82be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.215.176.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d373567-0ee5-4654-99f2-a7988e6cdfa5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.104.177.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5551daf-9d7a-412e-a770-046611af9820", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.197.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1898d972-fe0d-4851-b964-d7876f6ee4e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.234.68.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5091e1-e85e-418e-be25-efca54bcdfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d566e1a-128d-4074-bf46-d9f3e05b264c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b317fb0-fe4d-4832-ac8a-9246b26713f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95410f17-5418-4930-b744-8bf07357f3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36511c06-7775-4f02-a525-c8e8cc117561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c72de16-d9d4-47a3-afc8-dc6777eb3c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e4060-37b3-4af2-8e43-22a471a78dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b4a54d-8be5-4177-b743-698c53fc2d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d80ff1-0e19-4c83-bcc2-f8e13b0573df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e347e-6401-4141-95d8-b2628d7d8c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d348426-d164-46c2-9623-1395f7770df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90e78a4-0216-4b52-a7ec-1a21ec6d5b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520b76c6-6cf5-490e-8ecc-c212dd0aaaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1df94c-64f5-450b-a166-7937a3eaad6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec10335a-8f13-4f46-a4ba-9d13eef847da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148bf5ae-6bfd-4a23-9b38-671d307e69e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d4e01c-0781-4a68-9152-11a8bf97e8b6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.129.43.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732cb9b8-a044-4d46-a9b4-3de24ea7cb4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.137.194.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33193ea1-49e7-40fe-a2f5-99e219aecec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.4.0.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c423dfb-52ae-4277-92fa-dfe5a0b09601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.4.10.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c697c-44cf-43cd-becd-ea832a1ea4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d0e7e5-5b10-4429-b84c-bfcf01e3e1a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a06571d-c1f8-4b81-bad1-20175d030e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c822f3-ef8e-4423-b2d4-f77ca07c45ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60cfa00-803f-46ae-bce0-dca2bf1d0d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e29043-bd90-4b12-a842-e3fe076bdd9c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.219.86.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3e5474-63f4-4634-8232-e10243dc2873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.17.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b6f372-4977-4d37-b7f4-e3f09a0720f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.181.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5bf499-9cb9-4616-898c-5ca45fcf207d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.95.163.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20092475-6b10-460d-bb83-7bd81cf0b047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c7199e-ed17-4939-a860-7f8d5159b5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691f004-dcbb-47a4-bd0c-a2c58cf69f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39640c64-7f9d-4c88-96ea-10095f13f4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e69355-b824-430d-9e66-6381ec1ed3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.20.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a559f43-9eb8-480d-a805-6b4590e0e58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.223.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c28e3-0705-4d43-bcd2-e82fc959d93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803cc831-3666-4fa6-a5e7-e827c1b75947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d121f4-2fd7-4b0c-a6f6-6a704b2dd763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.188.24.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488a74cf-f144-43a1-b9c5-787b84c1612b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.241.18.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d04642a-5984-4d14-bcfd-4631525b012a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183641e5-7b9c-426d-996b-e017aee1b712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.237.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fc0d78-33eb-43b1-b647-1612b81ea9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.244.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32a970d-7cfe-4c5b-a168-5d3bf2792631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.250.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a872345-1595-4a36-a91b-c0eeae65d6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.99.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64618e85-3f22-4670-979c-b482203f5425", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.13.190.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4457ff0f-5a9f-4a7e-8407-c36834bb56bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.162.152.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b3accb-92c8-47a8-94f3-81e0ae9ab24f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5918ed-b3fd-4f06-beb0-c7e7f91b351f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.191.227.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b49ddd2-310e-47d1-af45-7c9ee43c89a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.2.76.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb74be-2aa9-4b0c-bb72-f94039866a5d", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.41.215.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823b1b7d-4a82-4e33-977a-1825de7602b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.62.56.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabb5044-6a46-4c01-b6b4-fb3b960abd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48349271-3bab-40c8-8120-9372a309bbf8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.200.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35628704-1695-4955-95c6-7de5f00cf7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.52.18.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e57477-7468-4365-af16-8224742f4996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.51.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ca3f53-bcc9-440b-b025-ff2eebf8ea74", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.212.235.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a6f4a-40dd-49bb-a8a2-279526bee2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.225.51.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bfc4a5-79cd-412c-90d4-4a5404ae5165", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.238.41.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1f6a75-026e-4788-8b9d-739737947e44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.91.3.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8769cc-bc67-4247-b4c5-24a60a27a5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88bfa99-c9fa-4dc3-9cc8-b2e99a9598b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ffa2bb-30c4-47a1-b8a8-a4fa610fa193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7b980c-e816-41e0-b132-dfcec46dfe66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582e7a06-cfee-43aa-b194-f8ad2050dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01500acc-0bcc-4f1e-9e7f-dfa57fcf32a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84be90d3-4bbe-4cbc-9457-690128574e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b488b574-f67b-43df-aa83-87ca606787bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9526bd24-b551-4416-9045-920e909ad36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d59d7f-3a2f-4055-953c-958b5cbfd38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1daedf6-2a81-4264-9c0a-7fd32416fc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f779236a-17e8-4707-b64d-08eda9c8c4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88749efc-463b-4018-a051-c7733033c093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b387c2e-e89a-4c74-852e-2f29e78c3132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ea02a6-13d0-4809-ba91-8d4d67921f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8c7661-107b-4e92-8305-7dde89e7345e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5aadb8-6bc9-4cf1-8776-d1ceb2ef81e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b453d676-8784-4249-950d-729a1d395098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe681497-de41-4a55-b3ea-4710328542e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.124.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e8d3ea-a788-4f11-ac1f-f55a606101d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.176.35.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6dae98-8f40-45ad-ac72-5e9d618a3cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.58.6.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae84526-c9ac-4a26-8421-0fc88ad24d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.64.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbedf5f-1d29-4518-9fa9-aad121627ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dfb941-4d6e-41ad-8c52-25d78141345d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9280b6-977f-439f-b49b-30888c0dee44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a40f4f1-4cba-4684-85b0-13c39cb4f0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757d632c-dc6c-41db-a922-66ecf9b0acb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.166.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac4129e-7a97-4c39-87e9-585226242c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098351b5-b268-4b23-ae85-9036d667d321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67cce88-5744-45db-aa5b-ef71097efcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed312d4b-ed37-4be2-991e-d6d1cc391e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1a7d5f-4da6-4f73-b82b-2048e44c90fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c796895f-63bf-48e6-a207-6cd65c81ac07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cd53c2-3966-4607-a005-21dcebc936ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6e9901-5f5b-472f-9e2e-31d419aadfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7cf2c3-e75f-4dc0-8d91-d6d299dc69cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0845f2-e874-429a-b382-e80cab7136f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7f5f59-61c0-48f8-a0f0-c9873c33030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.18.222.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728f1cf5-6a1a-4e90-8af8-67c0b288f611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da186a3-b81a-4664-9757-a39ff11ec2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e004c5da-1eeb-4595-bb53-fe459bfbd669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59514176-9fbe-498f-a801-310ebd47dbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f64c33-6000-4e5a-9ac8-7a273cca5973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8bf0a7-bdbe-4793-9a56-7f43eabc8575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe6c1d8-5468-4ae3-ba26-71a050479763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.190.142.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e315b3-7b2f-43de-a7d2-b80e7620e27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.166.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53f32fa-780c-4a17-893b-7ef80bc7f252", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca06437a-bf44-4925-989f-d39d47f6aa45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecd406a-4eaa-48aa-acf0-899d7d41e546", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58190211-8d5b-4036-8116-614328938882", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058d722a-55c5-47a8-a6b3-8cbd4e56790e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8139a54a-7032-45aa-a424-5f96f65dd975", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277eb1c-3759-4a51-a5a9-c229ff1dae67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e935cc-f94c-4662-abf5-4de3fe68a85a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed7b67c-7e2c-44d1-986a-3c058815f947", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e368792-384b-4eff-8458-6ef2fd3ffb97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37161844-7eea-4e25-8634-20e7e92952b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11edd366-953d-41c6-9fa7-224e38afe574", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e29f5b-485d-4212-8fe2-56619ffa9c6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631ca984-3418-45f1-8934-978031a9f273", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aeea623-8997-40c5-8a36-7b8c1c51e4b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4128e40-2a0d-4ca0-b7cc-3578f039397d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdb3354-5af2-4bcc-adc6-223cd3c1fb0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ef62ae-1afb-4394-b770-a692b6fe4d63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cdfe12-d885-414d-9f89-518419188e17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc6b8c5-187a-4de2-b7c1-b20f9d9716cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.192.20.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83718c02-6590-488f-a07e-324ed59429d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c6bbb7-0a6a-4f84-8b0d-6426e401307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef16bd6a-0f3d-4fdc-aa49-df99df6f0a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c90d1f-64b7-4845-8b3e-19f4ef75a3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb7f21f-b959-4cd6-8a20-cccf77fcb656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac232f5d-6e04-436e-97e5-4398b8676a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aad2b84-4af5-4a2f-89cc-be70dc95b9bf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.212.236.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e03d92-58cd-4f64-a1db-12e1a055110e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.214.101.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4f2d04-c240-4b17-86d1-5c845b2506b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a23f2d-bc17-4c1a-b587-022d2c8d2754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31364df2-815b-4f80-9260-efae7f1f7da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.86.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801ca184-a2f5-4923-8e76-5f9b1060167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee9bd37-98eb-40e8-8c6a-e1860f0ec5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0e0fb2-a4ac-4005-98e1-3ad61fcf97b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de60b979-d295-4bee-9140-ee89ffe39f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8318dbb0-345c-4c53-9610-bc92ba270eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581d93e9-ae4e-4c07-8d8d-e484e835af92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffd5ba9-5b93-42a0-b285-c49fb2bb62f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf6afd3-fd06-4349-a2d5-5b775da2a2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edf2b6f-7d7c-4cf2-9488-ec917bd17c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1cdd56-a082-467b-8f75-5efba6dd760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0866b55f-8c02-4708-b94a-e43f0b5846da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5bd499-24e5-4f86-897e-dc86cde7d6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.215.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a00ec6f-b302-4ff4-bb09-9355dad78492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0524f54-9c95-461d-b23f-4eee7b4d55bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32ddb99-f5ee-4b98-bfa0-33c747ff2e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21829f40-16d6-4bc4-a537-2df5173711d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89694f9e-d0ea-468e-837c-c8adbd54b6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ad9c38-36d7-4d9b-b40c-e325e8c60bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0a4b81-0b60-42ab-8c86-2bd5a4520ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799e769f-90cd-4a11-8f55-58f22af11d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409dca46-a201-4e2d-b8ff-6a0f743e71d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.252.232.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5476bcf4-bbab-4828-8870-aab98e12e22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.64.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69777049-b6b8-473c-99bf-11bdd752a81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dedf7aa-35fd-46ab-bae2-66ce8001d083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da283a7c-c27a-4bf8-b651-701b858dce73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.92.188.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba6487c-049d-4833-b0a2-c854e0421122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dd68e2-50d7-4d68-9a28-67441ed18d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc69434-b4ca-41e0-bdf8-8a392ce7c1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b651ec65-dd1c-4a08-849c-2ec17332e095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2de7ff-57f4-4d66-9eb3-00519f5989f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.99.7.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed98d2b-7e36-4d5f-b7a1-332830252515", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.10.86.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62daa07b-0f61-4baa-a8d0-5aa7ffa65992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.19.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1a7e75-6f62-44de-ac55-23298f52f950", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.178.152.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96012c2-60f5-4c8e-acde-c26901312f96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.23.28.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53941dfb-5f5c-437f-a31b-f9a49aa32cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.21.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3d0919-3c9a-4547-ae9e-e194fd1702c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.118.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed4a9e1-0f46-462a-b736-9417d2230c69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.103.105.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceb1cef-5cfd-4e99-818e-14491f68ca38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.23.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fc0523-dc37-458e-b4b5-6b9347f234b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.217.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765eb42b-4de3-4ad7-b4b8-448e5a20a782", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.234.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d74678-634a-418e-a25e-36d4177d480d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.75.30.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4601c86d-3b15-46f4-b3bc-d06610a8e8d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.77.202.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec14cab-359a-47c8-87dc-4fd3cdebabfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.137.225.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1ed116-0b4d-4d0f-b8df-f7e4d5a45ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ec6c4e-f1d3-46e9-bcf6-b3a95b806140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c6863d-bd77-4e4c-bc26-6c54734b370d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.238.35.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5a36a8-8bf0-491d-9162-c02b9b5d7b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.28.223.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d337af-d69e-4bf8-84fb-2fb12567c17c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.50.142.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee25ff1-ab78-455e-9b33-e239de8fbbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.19.138.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a7313f-8d01-44bf-8c37-45094250dd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.253.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd3eba-73dc-40ac-9c78-d3790ed5ee63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.197.90.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25457897-a5ff-4678-b597-c3bf6a6ba2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.211.252.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fde2dd-753b-4f91-8c41-8d20a2d74c57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.181.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d382ea40-a29d-42eb-a8c3-4ec174aeda94", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.67.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033fc943-ba44-48c9-926e-2dbc81d6e743", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.253.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41060982-35bd-4906-85ca-a2d06c347a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.223.40.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ff637d-be1d-4dc0-99d6-20ee42409fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.223.41.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9f3cb6-3abc-4ee2-9371-88718821a237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.223.44.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a8e7b-991c-4a71-9aed-cc815065f986", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.6.81.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efca039-d84d-40af-b584-e6568aea08ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633122b3-b192-49f0-9394-8d8fb8cf32d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01631692-c1e4-4bc8-852a-ee214e7d22be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09666b19-8f3c-4067-aa33-8bcac396020e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.226.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859f611a-f546-44b8-893c-250effd258e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.233.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80711c67-81e6-4fb3-9b39-ebd69f932475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.183.72.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33bfa1f-d919-4be0-97dc-80eb6e09e957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.207.105.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c971b8eb-0a83-4262-a88e-32bd152a4118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.132.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b336ffe-6f91-429c-9a12-7440adad639d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.146.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d386009-d0c2-4968-830b-085d3d1cfbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.56.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0787589-701e-44d8-a365-03786ac9190b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5544eadc-774a-4277-be69-83e3be26f228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd65c800-7674-4e22-9f20-6f8ed7569d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c04ea2-8133-4d14-8e16-096c8369b1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be8ca5-0b9c-4666-925e-10166da194bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b737af-391e-44a2-87f7-20ad7e1f2598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2172717b-c1b5-4398-9b80-fbf728a417f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58839392-3290-4681-9a9b-3253ff4b4cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eb30e9-52a0-463f-8ffd-f62f740702b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c655a1-60e9-417a-9678-20cc6722ceb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85341f97-aee2-4518-b94d-950280d4b953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe3bc3e-55f3-4831-b7a8-46e598462bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09e44e7-8875-4966-a1fa-51fd98fcecb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ad9034-8852-4a92-9e00-f129a7db68cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504357e4-798b-43d0-b725-96afd4e66a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122e575e-eeec-4ffa-bed0-f104aace1608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4910d37e-bf2c-41c0-988b-12bcc2523cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4543e72-64a7-437f-8f2a-c1952c427125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe39ffe4-9c9d-41a0-8965-8286b3b902c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3648ab7-3297-40a5-8efa-030ff27f1cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ddddc7-dcbe-4c6a-9b3c-5cec5a5676cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5547103-1939-4895-8051-39ff475e9d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f01af26-7831-4556-8134-376ab7bd77ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4b4701-74a9-4514-9967-bdde6cf72022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c764e2f8-8166-48c6-b443-71f2db4daed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f525dc3-9e3a-49e9-ae3e-c5cff8a596e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b023fa-39aa-4998-accf-e267e7642904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992f9a30-a2f9-4ce7-8d6c-ff3da3216645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a74ffc-6670-44bf-9509-7d977cacaecd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.125.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1daa60b-6a9a-4615-b3e3-5c3ca694b1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a4f52a-7ad5-4d9f-89ed-e7f56717c938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7149bec5-5ef6-405c-9d16-4cb379135298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5e3b56-c940-414d-ad84-59ad79834564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c33fd-9926-41e2-893c-4973890830b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cceb534-71d5-47b6-bee3-1bf706cfe406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dac87fe-a10f-4451-b7b8-ca216bcd9f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f71da5-9edb-4a06-9435-b7aa93f17842", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bba30dd-1a43-4631-b8f9-20b8fade2507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1356131f-2c16-4fdb-8976-dcb286d85415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b397a37-f07d-446e-b493-754093d470d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b42255-8f8d-4b0d-838f-f0289ab64dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.31.31.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa7e818-589b-4917-a0fb-accafade0ca4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cdac7b-bf43-484f-bd99-a0c97fecafa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.204.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4048da16-6c03-4dda-8e83-16d9512ab89f", "relationship_type": "indicates", "source_ref": "indicator--27cdac7b-bf43-484f-bd99-a0c97fecafa7", "target_ref": "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5094bf0a-0cb3-4473-8490-744388d3a0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce12efbb-b6f2-40ac-8255-e81f1a12b077", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de410881-b359-4849-8c82-9ba5d94424b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0337dd63-d2e8-4f65-bc67-3d560b0f9c80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129edd80-e73f-49c5-90d4-4c984b9d01e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff732e8e-1ddd-4c19-a73b-a5800c8a771a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582d6a6b-ffe6-49f1-9b62-7a8111a9c92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d086e682-8d27-43b5-8b6c-21ac589c90d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a93e341-b9b2-4b16-8c58-01fc5e993f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764330fe-309a-46c5-bcdd-53fe722a2701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bfbb88-e50f-4b0f-b1c7-93cb89054fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37872435-4e57-47e8-81e7-bca8f8621ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ca3eac-e02f-4d02-90a0-f8dc6c4506f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5850d2e3-489d-4ee4-9654-d5424de12461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68152015-e258-472a-98bf-05ba22cef8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c4623c-0764-4524-9a39-c0dfe2137f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82999355-a4af-4688-830c-eb579b7e57f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfce753b-57e6-4d13-9b93-5a6f22fded14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fedce02-b754-4dc0-9d69-88c8ba0e4054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.77.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54376cb7-2573-463a-8a43-7942c18225dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f686007-dc80-4376-8b3a-7776bdfb8c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e34d1ad-0d89-4131-8b48-935aad97f5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.204.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e524c72d-0c3a-4bcd-869b-a43641643fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.237.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbbb4a2-d22d-4e38-baa7-726cf5af9660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71876170-093a-4779-ab3f-c74e6d92d29e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.112.228.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4d3d56-9931-464a-8c80-7d732392a847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd3df3b-c8fe-46a2-9dd1-cd9924e56afa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ca9be2-b36c-4351-8d0f-530844f7fc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf9b407-a84a-4ba6-bba0-9adc555b6c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e50dfe-f661-4c5c-8ad4-2321e4478bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d82c76-bec2-49a5-8756-17fdbae41cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e2572a-40c6-4ef7-98b3-f88ac27b60a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a69ba22-81d4-48da-bb9b-cd6eea681279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb25e0d-9d2d-4260-88a9-95720f5e6025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8f1bec-91ca-4a9c-9ab4-91449dcbb785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14292762-6fa7-4791-98d9-33a166d44db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe03518-70cf-435c-9a73-dbf1551e958a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b2c0dc-bb0e-4eb6-8165-cfd3c04e9f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fa8be6-d4b9-4efa-bc4e-64536bb30521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7778a130-0179-4611-a035-8bbead2c5f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87432c2e-73bd-42ba-9ea4-07480cb26d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ce7628-4be4-41f2-9b3f-5ef92c5ad566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5609a41a-0425-4bc8-8999-09460b485997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78db452-8f02-4e35-b675-aac216ee0981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafb0b1c-563a-436c-b20c-51367f1afd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06720d2e-f439-4a05-b168-768c992127bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17906211-65e7-4d96-b7c1-ed9cdc8d2aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b61614-5c62-4e3d-90e5-4899d8ea020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f71ba9-60bc-4e56-b1c5-3a0152cab142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e91188-70a4-4e76-9e94-55b3b8e650bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fb39ef-da77-48db-8eae-db024afa2bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a23fa59-f83d-464d-bdfa-b2f1f1637a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a39745-11a5-4cfa-807e-0e7f51c4d4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ef903c-1428-47a8-9dab-6d97ff4d26bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e3f2f1-e57c-4113-b138-077bdee1231e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c19640-be9d-475d-ae92-67a3f866ea47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396ef87d-99fc-4876-80ef-03c2762d6226", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.238.119.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cef8b98-1262-4683-b4bb-4d141348f924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.82.14.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bc5831-7f92-4917-87ca-b6f64c515f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73192e5-d79f-4d49-a8a4-298d102e367d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9196cd8f-be99-445a-8024-189ddaa456f3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.146.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e25b69-5d9b-459f-a5e5-b702b44e1d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.244.192.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8be1a23-b009-4b87-9f96-204b4e2dc73b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.17.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c446ece5-c15c-4f5c-b5dc-ecf478a36b92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.185.169.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fffd23-ab25-46f0-9823-0cf9d101ba78", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.18.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b2325e-77a5-4ebd-ad1e-1953d1b97c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.63.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8451d490-9784-4679-a2d4-3f41313961c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64106a3-9dfb-420b-84ee-3198eea9b32f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef1bdaa-4af6-4759-ab7c-a3ff065b0058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a511317-3986-4912-9367-599b39fa5cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b07f72-d039-416a-95af-c8b4e1946cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054a01d8-8dc9-456d-b3c2-bbea68b52071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31ad713-6b52-44dc-ab16-4b8086d3a29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a365e3a-a698-49a5-a8df-205df5330940", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14104bf2-54f8-4e57-9f16-c38e0c21a509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea4722b-8b42-4e1e-92f1-ac96a606db03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68d493c-9e17-4455-8dc7-bb0f385433b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7567b732-f407-404d-acbb-77e80cd61318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d5d172-f1a3-4656-a178-6f5696aa8da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4b128c-f9c3-468f-a752-cae3b1442ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1779ba5b-ff62-497e-9b55-24671f33ace1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee23579-3fac-4dc3-a25c-2bd0d93b5847", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bc7af5-8069-49c5-839f-62501f6433a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaa7cce-9d12-43c0-a225-ed74d3cdf14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038ac853-98f6-4267-bd4f-4659064a3db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42aa7030-9bad-402d-8188-bbf2867f1967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86761a78-73ad-4048-a0c5-da7c817208b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69baedd4-4467-46ac-8857-cbe06fe243bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7226d9-7d7a-4fab-a3ae-9ff617e8a716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7525b7-c6dc-4db1-bb0d-4e88323dbd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352f3abf-e45f-4bbd-98e4-eded3ad6ca00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04211584-0bd8-4ef5-bf3c-4926d798c43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36d3c99-ff59-456f-80bb-89b48eb61076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfb30da-d363-42e8-8e79-4edd3c6f6777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806f4ee3-43b2-4e35-9c19-54418093f422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb901e6-63d4-4877-9c6f-1c3277f3da86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37703d89-30f7-476c-938c-c6f10279124f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31eb9d0e-2067-412e-a665-da253f3c47a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b342f46-d3a9-49c8-943e-1aac1c812756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3211e3-9559-48df-bbef-08b892042546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f754403-d4df-4763-a534-8a1519a46043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d42fc2-dc04-41aa-b937-1f1a5c6f6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8793bf2d-253b-4595-ae01-ba5f8f9a1754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11c94e4-0139-4a5a-96c3-28475de98fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f86ec0-30d3-4b4a-b451-c9723e6a94b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9ae82a-d5b2-44eb-adea-528c7f4f7551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8e11a6-59c5-4f78-98d3-758ec85c13de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686405a1-1c08-42d5-9657-8db901186a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907ab45e-92a1-4153-9015-c36645d90bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17f3c80-2f5d-4177-94a0-ffa9ccfe6e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf2c7ab-0daa-48cc-bca5-1302844f7ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b83388-9d8f-4849-ba46-e53d0c67e44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9221061b-176a-455b-95bb-6b67551cd73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c07951-7209-4e30-98b6-fa2c612f4049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384a43e0-370d-46c9-9542-07e75cd16d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a7f76-705b-4ba1-ad4d-22bcebca8c54", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e20e545-395f-41b4-b935-baa8a88ed967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d88b30-33fe-4762-9bed-de033e8733d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fc1632-f9c5-4495-9b3f-534537dab040", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385c09f9-3540-4de6-9c52-a98435ece9df", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd02b60c-b801-4171-896f-a010e2114d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c0f1ec-8616-4ccc-8cb5-786e687b1626", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f26b613-19c9-4a89-9ecb-f5e44c3339d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37312181-3bba-4e20-9aba-64e84d7c83c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5feb8dc-9768-4405-b4ca-b4a3ebcda74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c745ba3-36f5-40af-b77e-829bd2e56241", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb74f4f-40fd-4931-8caf-299636128614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7029b707-dc77-417f-936e-cffd5a9eac17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d06e8a-7de9-40a4-97bd-99da910e68ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6583adb0-36ff-4fd6-bb27-fa10b590fb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fd5ba6-a4b7-420a-ab2a-8e9330d52ef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a1c025-fc1f-4067-9e1a-001b8438634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc29adf-56fe-49cf-b8f9-c559d25d9dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce138a7-4823-4dab-be18-09dd260b587b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ff3cf5-1710-434c-a40e-fe53e5a3e08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499f4866-a291-4577-8166-1ebe362c887e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1a58a4-ce01-4d80-94a0-c5027b7d16f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29b72ea-2878-45f6-80a2-9dc6816c9f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4d455d-2db5-48b5-9a33-7ff651ae76d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99c0994-6c52-4960-a25b-e2ef8fdb6f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b49d2d-74a7-4359-a456-011e3a7a0fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1f733c-1835-4c59-a88f-ef138e5479c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c30b5d-e06f-48db-a8b3-32d1ded00934", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3dc3cd-ab65-4906-a969-633d09e91214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b723c7-74a4-4866-9002-a7c0c9c6ecaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d1b410-87a4-468a-b29c-6c97eb20dd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43fcb59-ff8d-44b8-a3aa-014fc1af1daa", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3692ce38-547f-4bb0-a9c9-497b61351f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc01752-49ec-4999-9e66-bfdd96788494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fcc229-0655-4e4d-a23b-8c3f89ac653f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca2ff59-5b61-449b-9474-e135772a35a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa576f7-0dde-42d5-820f-ab51f8872310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a297938-955f-4fd6-9603-cf564bad6ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf009b7f-88db-443c-b949-bd7614afb8e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9579377c-631c-4f46-aab4-99b60fc0b6de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03468d99-30ac-492e-8feb-fda03947d46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf05ba2-61cb-43cf-a737-69e9f288e684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25eade4-511c-4003-b339-95faa264cae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2becc9df-06bb-4fbc-8ea8-cb037234e936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71a33b7-bba9-405f-8556-b6b68bf9a467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10016cd-edac-4c62-9252-6374903ecda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99402513-226b-4496-823b-c05867a3205b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91026da8-cd18-4963-829f-40afab678d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac526215-e00e-4342-989f-dc231ae5792d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01116d4-5b24-47da-b822-71befe2ad520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c472cb1-df27-49a5-a962-f02eb2ce4bff", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5dbf79-0761-4106-9c86-464154d87e41", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.200.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac668596-7d3b-4867-9693-97f65efa48bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77fa3fc-d04a-4c25-85a6-b337e5b51e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6082b9-8090-490c-8c16-14a6157ba893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4f8ca7-7a3b-4d17-862c-0a34882ee60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200dd8b6-21fe-411f-934e-5407da0f4f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a274de4-6e46-4c4b-b0da-3c6881774d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb9453e-816a-472d-9d0b-0ff3463fbfe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f1f5d6-e853-40c5-a548-1536a92ec211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73886ec9-ebc4-4b90-b71f-45f063e4e9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80998fa-2705-43db-a04d-71cec012e109", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753d82dc-de86-4921-bc62-6efa16a5d30a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.19.225.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f0f9bb-0949-4df5-a1b5-96116c78c392", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bdd697-e601-469f-95a5-a3183e230d67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736cba82-1fac-427b-81f5-37ccb920f32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4f3939-5d2e-4581-8f6a-dde94568eae8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.38.125.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b47b48f-be9e-4b1e-a869-5b9b462641f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e532dd1-b692-4441-8d32-f33c9108848b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402773d5-18f7-4c50-a8ef-565776841cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072fb4ba-e2da-4fa9-95a2-7a2c2bbffb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec9e72d-1549-4841-ad9b-34ac3375fd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37813f62-09a2-4aec-a957-ddc4b6e41434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee968ff-a757-432e-a4c4-fb8811bf143c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0006417-7fc0-44f6-8203-123a3e44e064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d443d7bb-f776-49a3-9b1f-2d504172355d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f53bd3-3bfb-4a8c-84df-d2d257fa7aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59e66a-e191-4057-998f-b9b1930dae26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ae976f-b676-4e04-98d4-ba58a9fe52c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cd9c4c-e5be-40ee-a86a-c7b36681eccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a57fd6-2578-4043-8ebe-2674eb21c0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f98915b-23fb-4d52-9dbe-71aaaa7e5b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1cf130-3829-4f4a-a4e4-529a0547665f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbbbd05-1a48-4fe5-ab5c-e3df09e8bb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfeed81-0a2d-48e0-b51f-479f0c376fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d91aeac-190d-4d18-99db-c3e5dc94e7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4284c9ff-dbad-4a9d-afef-573d066916d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f85ecc5-a388-498a-97f6-5471572edfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.24.139.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e082beb-33be-46e8-b72e-d8e7ac94ecb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.248.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1b5530-9797-43a8-a393-1982da3c70d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.50.152.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d41bfd-9efc-4080-9ac3-57e435e88275", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017151d2-e7c3-4ca7-9290-f7d4cff2d7ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e6a9bb-4525-4d9f-80e9-8daea68d2af3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ac2ddd-236b-4e2f-b752-c31a099984f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae13a5ac-05ac-4b7e-9f95-e58e9e214a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.100.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b68788-a73e-4843-8f40-6f766f7286b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.109.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be8968f-7e46-4cf3-8560-7349973f3017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.112.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84f0dcd-f5f9-4305-8fb5-a5b24d256db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.19.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7f6412-5904-4455-85ba-2e58c5d3f9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.39.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3898bce-01a8-4c6c-9539-87327360a5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6981ff9c-85a9-4bda-b093-b25c796304c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3011722-e308-4b51-aa1b-042a8f8b1d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.60.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043d799a-003b-407c-9ea3-2936b415a3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.235.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3295d02-162b-45f3-ab20-1a019b2af47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.50.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259ac2b6-200d-4b37-bfc9-98f2d7cc1538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.50.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e070fd5-b715-498a-9bc8-697fe67cbab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b53212-fa02-464f-b356-d61230fd8432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.228.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ea3e86-d1ac-4267-a759-7c705502d691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.243.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff91ba3-d198-4d5d-b5a5-184ac9c65c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.36.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd69e683-f20f-481e-a57c-51eea9ed7e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.36.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b9681f-5d48-49cd-a1f7-86577e06db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.241.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e88ad6-ee90-4774-982b-ec96411d168b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.242.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba41f8d-c711-449b-a347-4de4799d1754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.64.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267c4074-9660-43c4-8635-33f6652b413c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.149.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fade963-afaf-48a7-89a5-cecb7e42c0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.165.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1685e82-0b10-48c4-b970-eead31601a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba8b162-588a-4ae0-9c46-55a48addf280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.207.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97e4e26-173e-4f00-a746-1c964d361022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.76.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c0d149-de44-4be8-9b71-b8d0924f800b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47629dc0-df6d-460a-bb8b-1ac51d25c94d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e15a1d-656b-4388-9416-1d71c8d752b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92161fa-09c2-4508-a638-da2eb39050cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd2a0f4-2089-417a-b235-7de15fc6cf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75271fa9-262e-4cb5-b776-ee66978bb7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0891576e-c12a-4416-8809-86202acbd743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75875cad-023d-45d1-8984-259e5da77bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b132db2c-e827-4b97-8dd4-be5f33979558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.35.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14f0933-65d7-4da3-9389-ba53d1730c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.35.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28e7772-423c-4ac4-a0b7-e9c81b75d294", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.56.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b172ad19-f2e6-4835-b150-5c45de0525de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd19a12b-0357-427e-b481-12d61bda6fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76c73f5-27f4-46bf-adbb-ea75fc948f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecbce55-6b55-4638-8dd7-03cc4982cf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa908299-cee1-4a0c-9770-6440a1ea0dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.55.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82bb348-6408-41c7-84ad-a39b99a5da94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.82.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9f33af-8f6a-491e-a9cb-220bc487230e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccc5329-0957-4be3-9ff0-874b9fa96083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60cbdc8-893f-4902-ace4-dacb9042fd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e4c0f4-02e8-4d8e-801c-79c2a804fe92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd042e1-1bc1-467b-bbfc-68f41566a6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.10.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec8869f-f722-40f5-8dc8-9595746937a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.13.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db06073-e2a8-46cf-8c29-155123b668c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.68.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d540fa-721d-41ee-8cb4-4b1f89169b8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.194.96.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d54e60-8bc1-42a9-81fd-53113dc132c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.26.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2532dce7-3fc9-4520-b88b-f5acd91d485e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.210.186.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced81691-2242-49cd-b98c-017965905bc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.11.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed186e5a-3883-4244-90d2-f1eb0a3305de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.14.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d1ac24-286e-4c33-ad74-062d9875b5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.75.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31018266-4c95-4c28-9b54-7a23b951b449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.18.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebb3e5e-152a-4da9-8b24-b0f1a394cfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.18.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585b4a25-5429-4643-a23e-6935c61ed75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.41.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b1b21e-cf44-46bc-9df1-6941068e072a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.50.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f23388-095e-4c92-933a-7740fb3ca062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d046372b-c4fc-449c-bf94-588efb9bd597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.215.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5298dd88-ceb7-43ed-9215-62882e65c45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.249.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cab3f7-6673-4f4d-8c58-9dbf0c01e81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.59.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc8e7bd-e086-4003-842a-90140ef7f92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be8c212-24e7-42b4-a368-cc0aab84f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f95f9a6-7acb-4bf9-8851-0eb156e158e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.239.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357c67aa-6b6a-4e69-bfcf-012eb536a9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.91.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617f017e-29f8-4100-9420-7108c5af8307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ce75f7-6b88-4b62-8274-cf57ec0b392d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57aff138-19e6-4211-b503-a6d6cb6a30b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c473fa-8048-4c07-90df-ac6359cd69cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5881ec-e892-4f8b-b83a-824bc0bb3d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19084a-6fe3-49f2-a992-d6395e388411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dbb387-7e9d-4146-aacc-eae9ce466bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0573e734-b345-4b31-832e-3b560edd71fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.170.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fd22ac-03f4-4491-b706-3c0b5f1ed06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.171.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d2a714-74f9-42ad-8045-16295bccefba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.171.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559a6295-0d72-42d2-82e6-e02869795e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53269925-cfbb-4b6d-ab2d-c1fc75e08e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.179.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4010a77-e5fc-4775-83a5-be64f08719b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0350d66-2896-4e8e-8783-fea53559dd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a911e7fe-74da-44ef-99ad-e24bccf43a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74483eb7-55a0-4824-b48e-cf03f443b670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc527e6-6f73-4080-98af-e9008a49f822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaf79b3-b7cb-4974-974b-107d236f3739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.110.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2e3f8-5e15-4e40-b7cf-838028a81508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80af349-4671-45f5-af08-6a5a95f00a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.90.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4390a08c-9c57-4c83-ac71-d37ed55cb731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.93.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c487ab78-9de5-4c69-ac4f-e9b89effdf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13f75ff-9cfb-4025-9c8d-490c24b76619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.73.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b3baa1-2eff-4283-8897-aa1013ab5e39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.92.77.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7c97a3-3cb0-4978-b67f-50bd2c46242f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.96.179.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bfbe08-71ee-4b89-926c-e46c41de1a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.163.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542f7bb1-188b-4f30-a472-f0febd2cecea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.155.66.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46aa9ce-0703-49e3-a6a7-b2fa6fade727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.236.229.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e626bb67-1c8d-4a3c-a937-0785c5fdc0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.60.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bab28e-3b19-4f24-ac53-d20733d5d21f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.159.87.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335014c1-a7e6-4afe-afb8-f3a9d059b68c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.133.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d097d6f1-0420-469d-9031-eb8b131193c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.77.110.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80151c70-431f-4813-adde-3c4283c2a93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b4eace-9358-43f6-b203-7a2a9ccb8249", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.125.82.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f05b8b9-8984-4d48-b305-5217234652c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.163.102.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b55e5ee-5360-4377-926a-f1bbf893e686", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.170.91.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a31c15-d70c-45f4-afbf-88558c850269", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.46.28.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9df2871-ef87-411e-9d7a-de28e3ca0ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.106.115.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7483f7da-edf5-45d1-b41b-b50d47c9a351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.122.7.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b002d8-e8a0-48a4-afb6-25694bc43963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.190.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c07fe-c732-46de-aa53-b2ac989a22a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.232.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d50fc5-8fe1-4db7-af96-d517c41f4a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeffc16d-ab30-4dbf-bc3b-032150878020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.197.161.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0408f64c-994f-4922-9453-e8be88a56996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.197.162.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee92b4a-95cc-4347-a8b0-5f4a2bbee560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cdcaec-abce-474f-8102-e2945f440246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1abc53-90e5-456d-98d1-29f744f3dd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6089c084-b41c-435c-bed3-c72403931ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f56ab3-13e5-4607-a4d7-e9196c80e1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc01ab7-3a92-4002-9c1d-3efab6b4e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c570ce6-2f4b-4bb0-a1a4-221bcde2d2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4667e94-33f2-43e4-acc8-ab9166205ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed5092f-c0a4-47cb-843c-dd48a07bf067", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.147.201.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fbae8b-b39e-4b9a-a632-f536d9727552", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.117.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa488b2-b20f-4b71-9cd3-423c0a53ed9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8428fa-7b2f-4a9f-8f75-2d1311dca9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab58011-6640-4575-b9f0-5318f97952e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efdf3a6-5699-43be-b49e-56b0aa5251a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0f5a29-6246-4c15-a917-31923a612a33", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e847656f-2681-4f68-9582-7ee69eb5f91b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c21d134-029c-434c-9f0b-f91036f446b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f0e921-ad6b-4958-95a7-206ab26b552a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a88022-d25b-4169-aa11-cc828bb93f48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8357040e-4619-4460-b68f-ad96ccc46fcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0a6e77-a0cc-40c9-8d76-e88d8e50ab90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0c591f-6d89-44cb-a733-6d2e221f2466", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037bcabe-6cdb-4dc2-9236-ec20a8fac684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0a2e17-21a5-4807-9b18-30d0024480a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cc5f91-6461-462a-8466-d2989be0fca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7654ad84-69fb-4f57-a3ca-61d868c81f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d50768-6dfd-47e0-a0c0-1362feadb412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cb14c4-1aa8-4c40-9dc2-c9610c93bc36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3e85c0-b191-436d-871f-0e6347600f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060502bd-3b06-4ef5-b0fc-3b130bb28354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd5d1ed-b8d4-477f-a3b7-9a788d18850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2807d313-06c5-444d-8b62-02802a74845d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c80800-e58e-4014-929b-f0d9ba292014", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02adecd5-1048-4243-b516-7a6cfac4e991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f4bf27-f57c-4f41-921f-bc9892e633e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301631af-3ef6-4a1f-8815-16739b16e8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae0425-5b2e-4e96-b353-c83299fb90f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e088efc-6a1a-49ea-8265-f2f8ba3c0689", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e92dd2-087a-4523-ab72-4d87ca526c56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eb0d46-c91d-4cc8-be8f-40c52e47ff83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b617c639-fb5c-4b1c-8f3d-8a4f483eca04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb40bff-14c3-4fac-aa34-b7dc49ea9f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e923e52b-106b-4778-89b2-074e6837c48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d57aa3-e279-446e-b253-7398f53ca3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedf2737-a203-48c5-ad52-477735d6f46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04520785-8761-4d25-a866-0f2ddae94bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd863828-e45b-426e-9d93-4064254a6a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6985708-b95b-4640-ad88-0125bba446cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472b8ec7-94d3-42ec-8c59-3b6e2b150cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2de9275-c489-4694-a702-5e3fada401cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e22330-79f4-4cdd-9b1a-0ed33ceafa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d6178e-6db6-440f-9a15-44c5b56070cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5e9048-8627-42ae-bd4b-945065b2547a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59527c9-4bd7-4b7e-8f2f-e31e2a3bf628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd7d709-168c-4a41-9d96-0ee8a423b9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3218e4f1-d702-4580-948f-d591460a5e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df0d3e1-e348-43f9-ba39-f7adae396796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7475e7c-2291-45dc-9580-4eb0417a646f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749da6c6-16f0-43af-b9fd-bf3e4134b948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67eda6d2-cbb9-42b2-b36f-616b4be40520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5e263d-801b-438c-a14d-14fc5bb6f10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63480f48-9c1b-40d6-b05c-1e553e25891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab6f37f-320f-4910-a2a2-4fdf54d31972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45465823-9e0f-4daf-b573-6d7cb1b9563b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ea6a54-8bb7-4e9e-9b9d-602552042484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1760ba9b-88c6-4bfd-8cc4-114f067f2dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04f2e1c-c9bc-4705-9575-6fa07deadd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b0b2ec-2cd5-4107-9570-1fdabf84ee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f196a9ba-c26f-4751-a8fe-7f86b348fbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f74f1a-3d89-423f-8fb1-8c11f68b6c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527af007-92f9-487b-aea2-a87c528ea142", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15108b4c-299e-4fa7-bbec-daa91c0dffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75cd6b8-42c7-4823-ab36-41c3f3c4caad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da48654b-0138-44e3-8d9a-4aa8b5088dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f6698b-33d9-4b01-a82f-6b85d9f7262f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4f87a2-3b82-4769-a00b-0c8c632a8e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366cbd3a-8592-454d-9158-26c3a8b507de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc5c38b-4e30-42d6-a73f-274636cc5311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b117553a-6378-4268-8c4d-3c1317f2c3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1029eef4-e74f-4ad0-981a-7f5a87cacf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a9c11b-f293-4cfe-9683-12361591823a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29256c94-f3b7-4d70-ad8b-bd95ede0c619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdd937e-ae20-4cbe-9d14-f38b808b09ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1da298-ccb0-4066-880b-eddad9556ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4415c4-6a6d-4345-a345-c13a055317e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0e091e-502a-4a3f-a1a4-959ac10bf05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec6ba21-1e3b-4cd8-88bb-d434f7e28ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca44f42-fb03-4bfd-9661-1eb11e83d01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652ff2be-0a9d-406a-b47f-2088a0ae331c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.104.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4340fe26-f15c-4124-85a1-9534b24c5076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.95.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e6f736-25da-45b0-89df-02336e652399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.126.161.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69468499-72f9-4a1e-a095-7158ac928496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.148.28.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebc75a5-cb92-4936-b269-7cd15e813f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.170.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033ea69e-28ca-45b9-b972-cc3d993be938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.191.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d91a24-e96b-44ac-886a-916379ca191e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.227.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745243e3-4d80-4ee6-90f5-1a5ffbc1ce33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.231.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d160698f-4bb9-4e1e-9a57-2c89a9a32be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.6.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3dd13e-25d5-453b-9e77-9853f03fb047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.72.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61757f7f-97d4-42c0-90c9-871b0585657d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.204.64.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c024757-005d-4eb0-92e8-c1399c9c8dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.137.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08c76b3-4c7b-4e0d-ae8f-01a636b64d14", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85aa23be-a6bc-490f-9f36-6a8498300b69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c043a27-b22c-4bbe-9b82-9f261bcc0afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c38ac70-6aa8-4924-a00a-01905a27ebbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e021fd94-c59f-4f9c-94cd-362272e4ca98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928eee97-a58f-4485-9327-24cbcd4bddde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79301fcc-f127-471a-9c14-6df0a6721d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d58743-5469-4f63-8b65-284669a11a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b737bdd1-52e8-48f4-a71e-a8fa0af5deb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5861126e-38a1-444d-a7cb-0d5ffeb53228", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53c0593-7e5c-4e59-8902-a88e690ab9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d273d573-d4df-4641-b7c4-b1dba8784f20", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa0050d-e990-49b8-8c3a-08ffc813d2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211bac29-fc19-4ba6-b8c0-81babaa3ceb6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a93888-b108-48f8-a05b-a4a9b5281c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41498fc8-7a95-44d3-aedc-83d81519c656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c0a65a-f32d-426e-ba97-996268fa8047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e20206-5a4d-420c-8c18-5c31eb182d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52512534-bdca-4ae0-86cd-f066e52d35a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.35.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a445d5-8633-48e0-a535-1f699e562f06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.37.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f89a4b-c704-41a2-97d9-063a2047a430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe526a7-1aac-4e89-a27f-0008fe857a10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.20.155.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8a8811-5ee4-4f3d-ab31-47230c3a637e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eddf579-01ad-48c1-af15-c79259b83a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.18.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830d29c6-79ae-4240-827a-9473dcd48456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.208.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07714f6-7f28-4b04-9ccc-960cf7a45012", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.25.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcacc268-cdaa-4801-8bff-5f6224adb9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.30.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3040b23a-9579-4c6b-968a-3dc5d6390855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c8f056-7363-4699-a7cb-b3bd7be6c2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.92.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e84d434-e16e-4114-9bcf-aeb9e860c650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.95.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358683f2-40c6-46aa-90d8-b6dadcb5b781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9018b68-1b3b-459a-b180-2c9b071d8f1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4780bb-8726-452b-9237-32661a03dddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.62.45.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7352b90-1b88-4617-8651-4b8ad7149c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.137.77.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec057ef5-5f70-4373-8722-4ed977775d93", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.194.41.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167d190e-a9b4-467f-9454-efb7dd8e4023", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.231.63.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2461d52e-da4d-435b-95c9-282cfa756335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.24.11.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b737608-f6e1-4fcf-ba87-172c1a38f5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4240842b-1ca0-4b28-847a-498bd4250a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed264ac-e0b4-4aa1-ab27-79f16caa0ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb92b4f1-856d-4e38-85ff-4dad19b35060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740e237a-a55f-412f-8f3b-943988fdc495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bf7e8d-0d63-49bd-8c7e-199054783d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14a991a-347a-4d03-ab52-2bb76dad755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de5e66f-be1a-4062-b15c-870b07c295fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9a9222-14a2-4b6f-83e7-12af857da12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13801e73-f6ec-4e71-9e32-c14007ec793d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bff32e0-d22d-4678-9770-31313a55cb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd94b193-b093-483c-9a1d-b911b14903b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9317de1a-9166-4295-90f7-9e79500380d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f73e74-2b45-41de-96f9-0dba8ff8d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03577833-ff73-47c4-af25-9b609cc591c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc86aef-d695-4b3c-a9ae-14db01349b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfaf91a-5247-4b34-9875-b04c9be42d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfd154f-750d-497d-bc16-6f139c4b226f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6160c2-3a67-4fa5-8654-342888d5149a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21de440-b86e-40fc-aa51-15de6895f740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d97ef1-eff7-4ae5-b06a-ecc144acc2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17920d2b-1777-4ab8-b276-045abfe0a7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f97dadf-55c1-4948-a6e9-b13f3a8e9c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe82d5cf-719e-4d29-a531-7c65d24023a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9c070a-9f6a-4b75-94fb-b52ff5b62441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14118b94-793c-478a-9004-b9903e2eef76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9118259-2a4f-4779-a78a-209cf9111e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985a6b35-7d15-4b31-b03a-f0cd59d155b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bb8cae-1061-4c41-90bd-53ea2eda97fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e859465d-fd8b-45d0-ae1e-07a159e31e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25e4d36-c71e-41ed-94b0-283afd5e6f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ebb615-2846-4c45-9f60-88c1d5368d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f78c7d-a831-4134-b6fd-9e36f11ac96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e354c705-f42b-4e9d-9df2-4fb8ad6c295e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfac264-9db3-4375-9222-98a3f624fb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd8fcb7-3081-4f64-b7c9-78359cd35b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbaa046-aac0-41ea-b030-288bc7c06e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e99ba7a-b0e7-4e5e-a7d6-fa5cb29b5214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40201959-eeaa-46ab-9daa-b47aba1c5440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50097b3b-2383-455d-8a32-78c173be79b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3c90b0-5574-4bb3-9094-3ddfed92aa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685b8694-9764-4c0a-86f5-d21c0ede0653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b6d153-3d43-4d93-aac6-0876f2a0ad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b135ee-ee63-4c54-a3f8-bc83c6cc8854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f092bfba-6496-418e-aa4c-599fa1b7e61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1b78cf-e795-403f-8975-bafe310bdf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.87.221.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81782cfc-a2b0-47b9-bc70-168aff015d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.87.221.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1123ee5b-8792-4602-8235-b9b51a4e4805", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d31b4bd-4965-4c91-a00a-05989323a669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03d5439-d395-4a95-a486-ac9d7233b128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403e8c43-7633-4909-a24d-87016e43cfac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6ddef9-6eac-4256-aed9-d54d8400aecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.203.253.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e38179d-1036-4536-98a3-b7fdb5dd7fea", "relationship_type": "indicates", "source_ref": "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "target_ref": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f92b9a0e-1c7d-4960-a34e-3b1f2f529fdc", "relationship_type": "indicates", "source_ref": "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "target_ref": "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8af6da6c-397f-46c6-914f-db20fa268cc4", "relationship_type": "indicates", "source_ref": "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "target_ref": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2c09f0-01a1-42e6-b745-5762e9a570cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34561ca-9859-4a9e-b37c-cdf45a87e6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0db55c-0a48-448b-b825-bc14436a8d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9223a0-e2e9-4a9c-a557-dd9e6a295ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d497871-db2d-4fbc-8ab6-16e9d5473883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a95a50f-2790-4158-848a-42d48c5fac61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc16ac5-1ff2-45e7-ac77-528b1ac70156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fece384-eff1-4600-ba0f-bfe2de1b396e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3691e23c-d6f1-4e05-823e-67a53ae2bb3b", "relationship_type": "indicates", "source_ref": "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "target_ref": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7599f9f-fe89-42b0-8ab4-e4b0c8827406", "relationship_type": "indicates", "source_ref": "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "target_ref": "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c1fb678-cbaf-4240-a11e-641e5c86747b", "relationship_type": "indicates", "source_ref": "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "target_ref": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcd4cc7-65cf-4fe6-b343-ac9b085a890b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43898c4-141f-4c15-8246-226afb7d0a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.10.217.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514b34f2-6fba-4fa6-a362-a46871060288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c39738-87eb-4474-a059-0057f1993e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a273a4-8418-4965-8c7c-a6b0240f242d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149eb9cf-8c32-4aaf-bdcf-661c1041a4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0440cf28-6335-4ab5-9acb-2e4cfb5d859f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885e2fee-21ae-4f20-b1c9-f21022fc7692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3c43bb-8055-4a3c-bc62-82bf22b49b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf002cf-0ae9-40f4-ab19-c1224002c244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235b2e95-a2e1-42e1-945f-d72eca4f9f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec87b10-171b-4877-ae9b-65c70523e0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5157c31-947b-412f-8741-4655ec455201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.219.80.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1490a87e-1487-4b8a-9819-b8f2676d7d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8829045c-d4a6-4a56-bfba-46e3eba479bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c714040-3779-4943-9275-1bf37f7f558e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8673514b-35ce-48f7-aef8-b0a6a2ba3f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b120113f-5c99-4026-969c-e44e020f3372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31969e8a-bc27-4655-b69f-01b955cdb7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ee12f4-3caf-4a16-a2ba-b045604014fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7701faa-999a-47ab-939d-36c3a915d7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c4897e-6d92-4727-a4b5-ef89263efd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7629d3fb-ba83-43c4-82e0-fbd7aa74750a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339f0e77-ce4a-4889-a72e-4fd566d38ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3bbc12-c8d5-4efd-af1f-253a86b15bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4322536a-9809-451a-a8e4-7844a00333fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec20c85-2587-4f7a-b424-8cf68b1181f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625c01d0-d74d-4708-b7d0-1b233a81a6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9ebbf7-cfce-4342-8785-dd0126d634bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2add0310-761d-4c18-9541-01b12ac68631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0c178c-cc93-419b-844a-91cf2315fdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c656c5fe-5ea7-4c79-8196-c9ba40217839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c978073-d7e0-4ac3-ba3b-01c6b9471d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da99833-40d8-4bae-a44a-9168d1bf0d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea811e04-6f6d-453f-9ac3-60c8fde8688e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f6df7-3ced-4c3d-aacd-734d1aab16de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e187b00d-2e12-4a49-a5da-259995c694f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f66342-e89d-43ab-9e67-99d760f2e581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb32fa2-f241-4fd1-a6e5-0ef59909c31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e54aae-e64c-4567-a8bc-993409544fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c639b2-ac73-4faa-a9f5-92ec4d42c265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93280d62-7cf6-4799-9711-d0110b88b2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca54f8a3-239f-46a0-9cf9-f2d277095556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdd38d8-dd48-4602-8a04-1af2b1c5ad23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df9d1ad-6522-45e8-b7ce-8e24bf149e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6c5d21-5658-425c-b405-8c877ca9622f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba881c08-ebae-4218-abf9-d41ec62ffccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fa0590-cee3-480b-849a-d3d249739767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ac6b37-0d92-45e1-ac5c-0eeb94b66068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592e863d-0aba-433e-b660-548198382d2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da25f06d-392f-4a74-8276-fafe4f589674", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.75.132.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69ea936-544a-4bc7-8c70-570cd7eca70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.75.142.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042ed8c0-69be-42b6-b21a-c40965d5ac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb4df8a-3fe5-4f5b-bedc-4a7d6e5b2777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cdab03-36a6-49de-a4be-eae6374df3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b67e751-448c-403a-a69f-e3849b23190f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e578d87d-4cad-4b7c-b244-5bc4efa3bbab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.35.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c930d0-2b3d-45d1-960d-f0d303ac5e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.73.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96b62bd-b285-455e-89d5-dafa252bc2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.89.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753535a4-f87b-4566-b3d5-3fb8f00ab692", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca722e2a-512c-4826-8920-cf53ab9d526b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.128.136.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fbdfc0-737c-4366-8360-b65129cf7eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.180.119.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049dcb4d-01b6-41a6-8723-0c2815702097", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981b0316-9b6c-4732-98ea-2c67288bedac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c842f7-2ce8-4e85-a4bb-34cd05ecaa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da39b961-1360-49a8-a828-2b26a60fc63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c817ef9-8c62-4a1d-a53e-4be4dc4f407b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba84c28-96c7-47a2-81b4-526245364e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.203.48.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4cba79-80b7-43f5-b21d-a029890f874a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff125f-5ccc-4687-850a-411e6ae759f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178513aa-5bff-4bb7-99c9-5e6822bc409e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.73.172.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d79104c-1d30-4491-bb0b-e370ac0940fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.145.88.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea6e16c-b7f8-49f9-8760-1924892b1de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.84.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c682c7-c9f7-487e-9d6f-4b1cf677a4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.167.192.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb5b7e8-72cd-409a-9077-da5a62ba0ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.143.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46cda1fd-461d-4109-ab82-393bfc2da148", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde7063e-42fa-4e96-98f8-6c91a57d15e4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.15.165.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5569be66-df9c-4109-a519-3da233100324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.255.177.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe09d0b-1cbe-4305-9ed9-abea783cddc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6188ea5a-0730-4666-82a3-7b4877874cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e67e655-cef6-490f-b7bf-2eca72464c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8deb9c-4178-451d-9fb4-8997afa27018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0979300-0f01-403a-8743-1a43130f87db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f940cb-3b78-4079-9528-8ae0bbf91d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f721d7c1-646c-4cc3-b64d-1c52506c7b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a722d-3761-4f3d-9dac-7bf5e4e06608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77de32a-1277-4fc0-9a4d-8bc39b091fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8e7ddb-d264-4fe2-b517-1c3b84b07f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bd99aa-9fa3-4797-b255-12feb66e6727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.132.164.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7435306-0922-4d36-900b-6c8169ad6ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.132.164.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53a0579-70af-4f2b-a424-2b906e197095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.171.177.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf92b21-49ee-4d5a-84e0-cb0ed5c6d900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aede7ae-ab9e-4580-860a-aba913254d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.81.41.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c4b4e6-0575-4cbf-a87d-20581f210b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389f44b9-9b49-4075-bd2b-0ee2e35f649e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436c49c2-ff6b-49a1-ad2d-25eaddd85e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad748ca8-3e19-4c4f-8f0e-c17ce42dfada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32abf020-00bd-49e7-9d6b-ffeb66198b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb95d633-261e-4bce-bf8a-7f719b491964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af6d2c4-12c1-4307-b113-3d207a67f6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eefef3-f1cf-4e0e-9ce4-037126337835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbf9525-9bf8-48ac-82c4-27e37a278c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f59808-7f66-4f78-bf0d-04bf8bdcb308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.191.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00d7ee1-225d-44be-9ad0-0a73a3bc3dc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.10.60.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a67848c-884c-4fe1-8450-8ea4c218193d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.129.47.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f12928-7ff3-4119-bd31-af28ee36853d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.141.59.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25510fd1-64a6-4d0c-815a-c35ecb9acab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a92f0d-bba9-4bfb-aede-b7b305b7d087", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.88.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92e6432-60b3-4d75-a987-a26b281ffca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.243.112.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb4e6d5-323f-41ca-9a96-1fe65be5ea60", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1004::f']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617eb0d9-e06a-490c-9296-159ff259cea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.112.79.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92c5009-d9de-4269-82af-356f35d008db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.143.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0bbc7d-83b7-43ac-8108-d4aaf96a7d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.207.123.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84095b8e-21f5-4b7e-a5a9-0d9ecc438e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.216.5.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef1db3f-ee52-4b03-8a4f-371f630d6707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.17.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743c8f0c-04a3-4058-8972-db7c7335cb59", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.101.16.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81de9ca9-130f-4b19-a23c-49508df0d5c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.107.181.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef6b0eb-f87a-4c6f-bc06-c5af19c027dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfb3439-65c2-493e-9151-098b2a6396de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d08a7f-775a-44a5-9a8a-19a578102835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19231990-ad74-4972-9380-bf017503a9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.151.116.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0ec082-626e-47dc-a26f-0e33b8a61044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.146.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658d8a91-655c-485e-9e59-6cf00d335aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8571d21d-969d-4a02-89f4-03dd56a17e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.201.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ec448f-432b-4e23-8a05-d6e6e93a4163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.104.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff056a7b-7269-4387-884e-1b38fb83f9bf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.128.189.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bba0e2-62aa-41ca-a610-181cd735dfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96dba1d-be4f-4d99-b9c4-a55734f7b7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e86095-6aba-42bf-9b2f-e6457de36546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e082e6-86f7-4642-92e5-b7c4c5dcee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbc38e7-f006-4a74-9da4-6bda74011d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f843b4-4d7c-42cf-9665-885dcbfdf895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d19f3da-46be-48b0-a5aa-8025f4373937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc430fb-fe7f-422e-b86a-7fe8d196cbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.184.195.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856a83f8-8c86-4446-86b2-5097b238bec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.59.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aae4851-b055-483a-8fbf-8b6fce689359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22044542-509d-4060-8fe1-b2fe1afe4454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f315676e-ff82-4efe-917c-aa1a639d337e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff1353b-40fd-44cd-9f07-cf61643a6f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.83.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ded220-a1d1-42d0-8517-48ad88df4062", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.97.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18269b2c-fe92-4b69-9f7b-1f0851d5f4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.148.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd86e14-785e-4274-b49b-ad56575e966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.246.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b030cd-ac63-43f2-8f45-c52683b7b328", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.111.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebfd83f-5755-4594-844f-06b64514e883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.41.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12e1aa7-1cca-46e8-9ccd-a1ce274f04a5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e08ce2-89a6-4497-83d9-ac7c89cfefc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.74.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8a4343-f22a-41c8-afbb-08a673a0fbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.99.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e6efb2-24c8-417d-bd91-537253e5c2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.107.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d130fc4-29b7-4fcd-9527-f91bff5f1210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.203.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda4f92d-ac4a-441f-9d63-045e8c83eb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.3.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561ae943-6954-452c-a846-b763b52d7591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.36.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a5a66f-ade8-4484-a1e5-b753e927d9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.119.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fb9bec-f1f3-46b8-a3af-d6113190adef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.225.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ad0fe9-7d99-4fc6-a29f-f2decca70a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.58.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92943b67-ec39-4cb5-a93e-dc7f5d229c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.72.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46da30a1-19fc-4143-ab90-10d292769496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.130.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5827ba5a-42e8-4eeb-bedd-b7c4553f20bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3396daed-d05e-4842-9169-717173a57d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.73.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1dec0e-9fab-4e34-83c4-415e603fa11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.168.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0616a6-d423-48ef-a0f4-b25584d5a62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65b06af-3f36-44ec-9da9-19307f57bda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe27e973-002b-477e-b834-42fa761356d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.205.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bf839e-d3b9-49f4-8559-97191924323a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.105.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c98be68-e717-410e-aec0-5920dad5cfa5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.33.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dbaafd-5701-4917-9b52-46f8a20d45ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.185.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab962ac-5542-46d3-817c-bd958f91f2e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.41.85.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.46.254.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42b737b4-7409-47e8-8cb4-2bfd64c2096e", "relationship_type": "indicates", "source_ref": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "target_ref": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9edfaef2-859f-4dc3-a90f-f4f61449ca24", "relationship_type": "indicates", "source_ref": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "target_ref": "attack-pattern--89f99014-2ff1-40ea-a2ac-cf67e4bbbf01", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a878eb6f-cb4d-4281-8a25-5a1fdd64b212", "relationship_type": "indicates", "source_ref": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "target_ref": "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--926c6af0-1a60-4200-9412-2553b6a9cf92", "relationship_type": "indicates", "source_ref": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "target_ref": "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06f872e-d800-46d5-aebd-fb3d4d741b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.179.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8fb330-eca9-42db-ac84-4dd1c7185470", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.56.188.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dc4136-2ba3-4fc7-b99e-e41327adffb7", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.59.115.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00a7366-7072-453d-92f6-941d263379af", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.10.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f2c12-0dd5-4f24-a073-a71a7f82003e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.143.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc2e7e2-491b-4d46-9726-86737b9879d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.144.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa976db-d59e-43eb-ba7f-dae9abf1711d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.150.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6db069-dd12-4604-91a4-40cc8fce60c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.201.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edb0a2f-0e49-454b-a897-14e06680b552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.206.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86fde72-e157-43ff-bde2-fb5b9825745a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.207.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1305eefe-8c58-45f4-af0e-a7020bc58a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.25.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e05f17-041c-44b6-b6ec-fcd249ec068d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.141.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e33973f-9a80-4527-add6-94ba715eb114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.160.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4458460-58c0-4b22-a14c-de55defd393b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.111.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9593186-c4e0-445c-857e-88d4f99f2f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.135.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3783f155-1375-41e8-8e3d-d62d414194f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.156.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de563e2-99cd-4b08-97f4-0c2f37e5ee42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.21.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf5a951-4e53-4977-ae30-90909a88f0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.214.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60280db9-8bce-4e79-a506-298c08d6213f", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.2.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600b7434-88a7-4018-9fa4-81095e0a8974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.78.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618cbc18-a1f1-4562-9d1d-9a7fa6c6244e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.200.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc26be9-0b10-4293-9c85-a5ad05728edc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.30.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9d7dfe-c522-4f1a-baa2-a988a507ea34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.46.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8036b0b3-23b7-4c92-907e-f06141219e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.209.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeb5831-243e-4c95-9b98-23f70882ffce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.196.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537f2ffd-4cf2-4aa2-94c3-f555eca03d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.229.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd27130-e7c0-40dc-8101-a7e81b42466c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.0.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e5e2cb-8a15-4ebe-abbb-db6f70f94503", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.168.200.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc982258-a08e-49cf-882f-403dc8884e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d762387-12c1-4ccf-a4de-03371b94c75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.209.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d9ae1c-1881-48e5-8eec-9311fa033008", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.11.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2444b88-dd12-417d-8fc7-0a366c4e1e22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.125.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8b2fd9-af15-4825-8c65-d7d3411698c9", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.223.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253913a0-1a43-4c7c-97d1-6ea692f86527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.114.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016f8009-49bd-49cc-920c-b133ddb74126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9632c4d5-4a23-44c2-8b12-1aa7ca823c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd65fb90-12c5-4ccd-af3f-9da107718ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34221800-d00f-4f11-8020-fa44ff3ed03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0562ac83-d14e-4a7a-9aa0-2926c993e796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7156fb4d-9ee1-4944-985f-b99f15d9c01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000f7001-725b-475f-9faa-4e006f7e9c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03288e60-11a4-4f33-888f-3582d5ce8970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d675b1-332a-4138-b8a9-e074d88608bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f37cc3-da4b-4812-b0e0-f01a5c98531e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97060cf1-89d1-4cec-aeba-8900e1027c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d117b7e-d539-46b8-ba2f-71bc92302714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7e024a-75a3-4863-b70e-4de8179bb21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6a2dca-b492-44df-ba9c-2701e7412ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4107d7bd-559c-4842-b628-3fa1d32a4af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a11509c-1d62-433d-94ff-40382c202e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38af9008-e448-49d2-9985-cfcd643ac473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4faad2e-7a6a-4e0c-9ace-6ebc54dd8700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b92853b-d9fa-4686-9852-f30616d9c624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338af4aa-c9ac-4695-b761-623e786c7103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58da16b6-43b0-4569-b053-5387678ff80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff46d9ac-6d57-4bf2-a72e-0e2e3012fa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e58f08-6d7f-4746-8688-c177d139c2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f871207a-4f5a-4e49-aad7-abdbb0db42e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff45aa9c-008d-40fe-9a18-86cf15b653fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac480df2-4288-46b3-a56e-66e91220c066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037245e3-94e1-4b39-8e63-e5f70f6a9669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8998ade2-d87c-49bd-9bff-62b180338fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd688f3-4553-452b-bd8e-817d1321584d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deedfeed-a9b4-4106-8dd5-f4e83d6dc53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761a3a94-6dae-4780-97a4-f2df02e4629a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e3838a-3fbb-4a10-a85d-092f1920a671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e0822-1091-46aa-a5ce-04538a39b8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74af2aea-9596-485b-9dc6-790fbe3e057f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6669d23f-b48c-43fd-8ae0-138113284c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec8bade-a742-4b23-ab42-057b8500f8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6305c61-750c-47e1-894d-f2418d5bc9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e7edd1-5cfe-407c-b74a-233992f2982a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76354ba1-a914-41d0-9277-8ef360ac33df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a04206-617e-4a99-9470-7fcac0cb5ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051654bd-4738-4fa7-9ebf-cff530f4ba81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce6bfed-960d-4ccd-8db8-432ce11b4a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd018d5-4470-41ed-a7b7-36ed1a1f19f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbbd110-8892-459d-aa72-53440e379815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5a2e24-a0eb-4249-9221-bb6ae09517ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced4386b-88ea-47bd-b17f-d83a097b6fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8837bd5-945d-4ca9-8f96-5bf7b1c2985e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa07f60-66ab-4da5-9a9e-a8583800ca35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382207cb-b335-44ce-8a29-39621ce277b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af74803e-aa4c-47bc-b60b-d561f584f167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5cc406-fda2-4d81-b535-03fc15f98ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecbf2df-6126-40ea-a0ba-1c8308cda925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdaba89-f59e-420f-b2a7-6697af9dd7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03adbd2f-8afd-4474-adb1-e8cded83d2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bba8b0f-04ab-41e5-887c-316291d17e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5987d0-0849-4876-8a5c-2cd1aedde0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377f754d-030c-4b6e-a207-e16fcf6df304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee9df60-188e-45a6-a402-a055bd7270d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0fe101-6bdf-47a4-b4e3-a0526a941f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b943fd1-ea46-4d29-8641-b1bae5d9f66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7158eba-e4dd-4d81-acbe-62709c8b41b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f2ff8a-e691-4486-982f-2ff254613f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068c1c19-c09e-4966-9027-6e6508c94250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c60ae9-0613-4097-99fd-7097b4045d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d86260d-243e-4240-b927-011c1c2e4b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef5e6f2-5809-4412-8fde-5b73c9a46431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d401a401-d996-4d1b-9135-28a1c8c5877f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7fb069-3235-4a47-9e87-55ebd5dd1e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8571ab-abb7-4b3b-82c7-c872637fb2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fa4960-ea0d-4a7b-9af9-9c35b2033d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d46e92-dbf9-4bcd-8a1b-97f61405bfbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab459a5-01bb-4593-8504-e2dce7b78604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c824978-b53d-4911-b12e-a838bbb9962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a70c05-3b0d-453d-bf99-b2ec41f9e314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110dc194-ae68-4b79-8a2d-d944424ce1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab28ecc-36ad-4d9d-b40e-d0539625f47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1c9ebf-efa6-4c15-a727-1ac766079342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6718ba92-7509-4cc4-86fa-16fcaf396cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785de4c8-e4b4-40c4-a212-571321ec6847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0469f6-87b9-4667-9a85-4e8cf917f37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9585bbf1-2fae-430b-bd76-009d39a1cba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0557b0e1-ba04-4e29-b4f1-5e4f9bc2f4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4735a35f-5c41-46cd-b4dd-ea1d0e538799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c81210d-e163-44bb-9416-749499d9bf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01d5546-46e3-44e9-b7bf-a377f3d936b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be83733e-9a43-4941-a319-fa5731556f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba5e68f-1514-4e1d-9d24-9975c88cc522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f682a928-a712-4675-9023-65e35b6d1fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da935ec-8c2b-4543-8fcd-195e6a63a0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31c55f1-fcc6-43e2-9ba9-ed91132b409a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee018345-e675-4e7f-ad8d-00bf5de6a818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50797778-bb82-40fe-bfcc-a493693f2a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c254e3-ed2f-4ef3-abdc-35cfe7637767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f186d85d-faf0-498b-b9f0-5602c0d24646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe904fa-4234-4f1d-8548-6859ce2cac5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d05e7a-e48c-4f02-a999-5dbd39fcbf62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78562a6e-ffd3-4cd8-8b08-0db782ab5d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4666c629-c982-4ea9-9235-392136015260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaa1202-fd6e-49e5-aedd-6adf6d05cfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99097647-5c3c-44eb-bd09-c9148e82e169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fba2f1-e900-4bb9-a6cb-b6d7dbf8540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b299b91-9a31-42dc-a442-6c93bf6c8eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b21a1-6eaa-4571-8ff0-1a9c1949d068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cd7071-0c0a-4403-a3b3-dfe34a8a8df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a1a77b-9234-486e-96ed-37bfe3d87f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0e8131-bc88-45a5-816e-95bd103cb38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc4785c-17e6-4a5a-9eb3-cbace8d314ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a236d7dd-51fd-43a7-8217-3be7741e26cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f880ec67-d51c-449b-b7f2-d5e20d30c83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c4aa6d-dfdc-47f6-985d-a62505bf683d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff20fbcc-3d50-46d7-a708-542a2a089ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.208.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6793f455-95df-4fcc-a60a-b5e31748f53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.93.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6539fed7-2fae-481d-801b-0adf367926df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.135.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0126e6db-3618-4f22-8d58-1acda69b8903", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.226.176.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85da1427-5c3d-4ba5-861a-6423fd1e8158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.249.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b5d595-9cf5-43cb-a63f-71aa624346bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.252.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8f8bde-5b26-4fbf-962f-6e7d563783d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.79.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfaa983-72a9-4c87-a513-3e2a4a2cc1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.100.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1848a9a6-c489-4e2f-931b-90ce194e6881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.123.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28541b09-9ca4-48c5-8caf-b191fbbed18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.173.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4ea54f-c5ce-45f2-a3f2-e914cfdfc0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.230.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b4b62f-1481-4dd9-b741-2cd48096696b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.104.216.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268f3090-bea9-488f-b793-1d5193418cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.36.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24698bd6-01c1-415d-a341-acbd62bd46db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.137.17.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd46348e-fb18-4735-a9be-9ac160339c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.140.235.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776e66d4-2727-4be0-82d2-a3a6bf26ddda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.244.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6060a3c0-aa84-4b96-89a3-29b62bab597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.220.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f403ddb0-5f94-4fe7-805a-762fe53a4b66", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.131.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c30a4c-fa15-4200-b6b7-6ab504f7fba6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.157.212.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ecd550-14af-45e7-8fcb-1b5186e58a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.186.64.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae669c7f-e3df-402f-939b-86a743f853f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.37.19.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712a6b34-6730-4945-86cb-a6bb496187cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.54.25.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c5216b-c5dc-4680-bc85-6a7f1c947b95", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.55.38.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dde306-0790-44ca-b930-6c58a11dfef7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.205.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45db110-5436-4082-9717-9560d2766293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.141.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7522277b-f472-4e1b-848e-fd88a29acd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be507373-7252-4319-8a7a-91ceaa3199a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.17.141.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd60028-b87e-4b57-8d03-770d865d11ac", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.210.77.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730c08f2-6018-4897-b612-141b5dabd8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.14.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d3de86-8c18-4a7d-a938-4a93f02d8402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.120.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20378dd-b3aa-4bab-8874-dd623546d513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.88.24.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a117959-82e0-4403-a50b-55e18ad2a3a3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.126.138.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6ce070-48ee-44a0-88d6-3cb6b9a8052e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.73.251.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7750db82-eaa5-4b17-a86b-bb09db0ae67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf44e043-a705-46f8-93d1-b743f33bc574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2191810-a7fe-464c-a7ff-835f6f60db64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.241.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbff1a4-243f-4cae-b28a-af9b2766cd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50333e91-33dc-4e70-9811-de9b56bbc107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.192.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d880bb-4316-4bad-8f30-8c287ec96d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.153.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddba6135-f940-46ce-b1f9-a32d52b68a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.18.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5aa485-9375-4cfa-813a-636f79e99ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.25.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4831b8-c51d-4382-a88b-d233bd3f079f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea73227c-4e67-4da3-b4b0-820316d9413a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287881e6-3cad-43b6-ab17-630cbe3b2f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f590d-81ae-494d-88ba-843a086aa72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.31.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994c73dd-0425-4a1e-879a-48de2c904794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d384f0-9582-4a70-a568-56ccde5519f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.45.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdaa294-79de-4909-9277-65592975a94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fce7c46-6918-4313-a7d8-15ba21e3d178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.115.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd31cc3-fa39-47e3-a2ff-cd3174c73116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda01275-5599-44dc-a7bc-a35b7f8647a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99945d0e-c66a-4b8a-9e36-2b8e7efecbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c8a7d2-636b-4dbd-8bb5-87c4b2ec1e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077fc4cd-9281-4219-840e-81ff182f8c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1ace25-de98-4fdf-9540-27e1ab1bd6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c782408-07cb-42c7-9c41-ba7cc6b41401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.187.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2558109-83f0-4df3-9339-c27d7ee916e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.187.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31301c84-07a0-4129-8ad8-234a1a95673b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.187.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0e793e-3185-4bbb-8493-22c690bcd318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.5.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073e2e61-4e7b-4042-8457-0e7d4053afc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.83.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a76c55-d734-45d3-ad6b-0e10a4a89b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.160.37.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42d087c-5421-4b00-91cc-677e237c3518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.27.47.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22997bf5-ac80-4f1f-a0ac-0aa7326ef9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.68.94.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05535c56-2199-4822-bfc7-a295bcc78af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.210.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8baf087-2a55-4ea1-9d92-3ef9321dace7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b051a6d6-47f1-4c30-933e-a6f3401d6fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.121.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a354126-d8cf-41cf-a726-75bf8f14fdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.224.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf33e9e-37a6-4f40-b23e-d2a4252d6d06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf83f4f-8d43-4c39-9b01-2d5ec0f2891d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d489ef7f-6a07-4682-b3bb-81f0b746940e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c411be37-b717-47d5-9d8a-24b3f12ff02f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487dbe83-e376-4bfe-9abc-0aea871bec9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc2ebdd-aaaa-48d0-8516-47229fa84f56", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac014b18-bf16-4dc1-a342-e45e5465d507", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.78.245.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb3ea86-fd6f-482b-b215-0a4592f82368", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.87.200.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f709179b-fa23-4ec9-9fb3-e0d3cbe14d0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.112.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1810c5b4-8303-4dc5-b2f4-b22ba153ab6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.113.61.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb12d307-f778-4397-9a3f-e343ccc4b949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda6504e-e3e8-4cb2-ad27-67b149a03c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.22.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f801f0cb-3230-4baa-971b-28a291c44b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.108.18.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22623622-d259-4bc7-990b-8c256f58cf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.102.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727b976a-14d1-4600-a08d-315c5a7bfda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.107.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5ba9f-2f4e-45b3-a136-3b0c83e927fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.107.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9d75e9-77fa-4567-a072-a55eb8604974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.119.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd31ae5-fcfe-46bf-8da5-ad7f4b2a0852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.137.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed78dff-3868-4c26-9b40-c437625c089f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.141.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6478029c-701f-429a-a0b9-986c147556cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.231.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9b012f-2e46-43b8-9d87-ed06eeebfa67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.232.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf545ff-c708-4b6b-841d-8526afac8e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.237.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d4cf21-5532-4610-8ad5-a80aba88e071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.242.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b4c1cb-30f2-4b42-b0e9-dcc4c1445919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.67.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7652f31-f628-4ff7-97b7-2ddd467d7272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.249.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3104ecac-4da3-45e3-b863-492e0edac8ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.111.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6abd24-c927-46c6-ac06-0766f2cca147", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.154.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ce4ebd-d2a9-48d9-8133-ca63f48138df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.228.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1db77ef-bd46-4a03-8913-499ac03ed189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.235.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec831cc-f47e-4377-9ac6-f8064b20d94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.238.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1936c617-53ab-4f29-9536-4958f75b860c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.240.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b761afa1-9182-4563-b232-05d98f29d221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.242.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a8ad48-cb13-4552-88a1-9088ac515e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.250.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5656329-f394-4651-8bf0-4c131f829c88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.3.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d556a5-682c-4357-918a-e254cd5171c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.32.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafdd864-55c0-408e-a49a-7516f551211e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.59.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c174829-9c67-441f-ac64-ea860edd42a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.225.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416b227f-9da8-42ae-86a0-d60c7180ea0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.227.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6150b5-01f6-477f-b0b8-9ab9f7566a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.232.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92516f82-9458-4c62-81a4-5347e8042fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.234.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633c4cf5-6966-456f-bc1e-c85347157092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.249.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90031515-6d6a-44e8-9ee5-b6d09e8539a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.55.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eae2ee5-9d1c-44a1-924e-2f29a463ccaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.166.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ec784-b0b7-4510-b596-214e1adf7b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.10.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290769fa-b7dd-4aea-a113-ae062330db35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.13.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8bddb-4b6f-4c3b-81c6-c5b03fc732a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.166.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610cbccd-a539-45bd-ba60-7dd7ae82ae46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.209.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5443980-223a-42d1-97f0-3e26a7adac4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.217.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1975c1-9952-490f-be21-10568d7cdb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.235.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b711cd5-fe4d-4321-86ae-f6343f1c3483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.237.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7217d8-0239-447e-8220-ff3515d33b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.250.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a00a35-6f62-4ea0-8e4c-57ff6af86c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.255.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb92b84-0fa2-4642-824b-f92c340d81a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.28.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e938a36a-cd71-4622-9311-0545c2594143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.59.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d220755-1bc6-4b23-a148-728782baa12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.65.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfd497f-9769-4864-aa38-334d089fe798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.67.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce11e29b-f7e0-4026-b8ba-bf005935ce0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.81.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2529eee0-a2ce-49a4-817b-4c2da84baaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25a6fba-3e08-4080-a3e6-bd7fcce40ca1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.110.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cd577f-9008-4084-8e25-c5e5a1d2bad8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.110.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba227d9-3961-4996-8528-d168150542d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.118.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76a628d-5331-4e16-9b95-eb0f7abd1c8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.160.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d8a0bb-7ead-441e-be30-859952516f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.168.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24af5a62-6e4f-4df9-b074-f2eb8950559d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.169.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f1036c-812a-495f-b502-d2e0a365bfaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.172.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddf9d39-3530-4ef6-a1c0-b6b79f0490db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.176.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77feb2d4-fda5-4634-b681-74cf54d37565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.188.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea5679a-dd15-4ca2-a6ce-00c8a01a92eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.231.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cd7b54-b3dc-4d20-a8bd-e2f7af663a3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.233.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b38380c-c6d1-4fda-bddd-ebb995e5e2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.240.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21acb3-3bf0-4be1-8709-27f58d591f3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.33.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00080579-83f3-4b8a-849f-7456f7c4320e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.34.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b038e47-ea78-41a8-8434-638cf16ffda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.51.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd36d826-54ff-4ac7-892c-3b137016118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.72.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dbbbf6-2a9d-4474-8f5d-9a0d798407a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.84.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd65938b-9638-411b-8ab3-d03970eb12fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.96.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c6d572-31e1-4056-8fd1-89a62c48119a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.172.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c2088f-1539-400e-b96a-fe934800f3cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecad5d66-939f-4200-af94-efdf80fb0f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.152.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252cccc4-0d3f-4bec-9252-5a8021212a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.156.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142db2a1-211a-43f9-b546-1ec21a559f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.173.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acb9144-7d49-4761-8832-256ff7c88857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.182.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a89287-8c3a-4f9a-9a44-f3b8c392fcfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.194.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6968819a-37cd-49c9-9af2-ea51e3b2974b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.211.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b00e5d1-5d62-4c6b-b638-3ed1b06f1e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.222.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dfa71e-ae51-47de-96e3-4e1fc9a514a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.65.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccfcc55-1100-44ff-a851-08c1c604ba2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.66.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8944e5-6737-4ec8-adf5-6737a250c7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.67.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1855137e-d4e8-4442-b9db-7998a41df9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.95.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0d92b4-0675-4527-bf3e-532cc33ded42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.133.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb56a64-0900-47b6-a32e-b37365f8f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.154.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec0ee28-9e11-45e8-8c81-f0e19bb47937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.155.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b8d16c-2b46-4bc6-a328-be65c811eb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.162.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e75780e-a7c8-430a-9b2f-4f2d5a9d6568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.169.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f108b3e3-1d23-4b07-803f-23a4b3259e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.177.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ea2f00-1652-436b-a39d-bf7f81f5e1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.181.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec1ed98-db26-4e8f-83bf-f96a91b6cd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.182.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8ee3bd-a78e-4b9f-a57e-5842d963cc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.187.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e47377-dfdd-4d5d-9a85-0577a998db3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.195.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c5f82b-7405-48d5-9009-c4a6daebeb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.202.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5810327a-bf8c-475e-99aa-e9b6a28bc614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.202.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f3f2e-2e5b-4aac-809c-f42b17499440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.204.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799d9ae3-8fd9-4ed0-ae12-6c89a5eb0fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.208.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a348241-d674-46c7-9b9a-f9b9a5970561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.209.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4def7adb-bb48-4781-adef-ca7edb01cdfe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.21.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b343c174-a03b-42f1-9940-98035e4a5b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.213.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aec3c9-a23f-4af4-ba7f-babbd9baa5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.221.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06211cf4-316b-4c52-9a43-5e3744e53301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.222.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd750e9-80db-4d47-b7dd-1099269f22fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.231.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b457f7d7-9d7f-47c3-b4ea-06de54e83fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.246.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c69d95-2b2f-422f-8267-ca332d10c620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.246.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ab537-108f-4310-9dd5-1530e8cb50aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.248.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c74f54-99ed-4704-abb4-2f644a1a1f15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.100.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62c07f7-af36-46e0-8e43-54186f43ad8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.102.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62661de6-12c2-4d1c-92bc-e6757c5e471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.115.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5e2cbc-8204-4b43-bed5-61b5b71f9527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.119.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f61e08-70bb-436a-bdc1-989c4c72318c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.127.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca8e44-6886-4b50-824d-5e4de898719a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.129.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6101df06-23ac-4296-820c-7efa4bf16d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.154.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7f5bdd-d418-4501-bb73-759e3338900f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.166.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df0c7c9-e08d-46cd-ae3a-0f5580010d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.178.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f181f59-67cf-4e9a-8460-e43bb95e8904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.205.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76ca7a9-cf07-4806-b2f9-f8ee4f7e9817", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9fc29a-3381-4d2e-9643-e581dd2d3965", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860cfb4b-3951-40b3-be4f-410f7e66b4e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.247.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3490d5a1-cc27-4631-af70-8e91ad7521ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.29.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e55697-6b36-46c0-8265-8969c614ef31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.35.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549d7d8c-0cb7-4524-9363-0eb5cc37ba6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6407dd2a-285f-4aeb-a777-8caa1ceaad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.44.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b552b471-3385-4343-987d-b2de8111f226", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.51.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb6eb3-044d-4073-8506-cf41e789625c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.54.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa14942-9d93-49a4-abc3-c633ff525589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.57.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdff66e2-3297-42f3-b432-d012149112d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.58.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b82625-2dfa-43e5-870a-0480aa78c587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.6.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0d148f-b357-49f2-991d-af5880c9b0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.82.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c242c3-2c1f-47a1-b46c-43979f5977e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.95.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de57cd06-f9e7-4cb1-8eb9-8c242025e45e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.150.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e7f94e-a025-4893-a140-2c8499167816", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.172.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205f4222-89ed-4851-8efb-9f1b974bade6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d787fd-b091-462e-a259-c46f7658600c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f768244c-aeb7-4e00-8995-bbdcb159fada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.67.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb81141c-63b0-4ab2-87e8-05752a2e02b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.158.91.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d26825e-b2c9-4182-a4a5-54edcf762166", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.128.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0660f050-7c82-469f-aba9-352b8c1ba6be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.136.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd64faa-282a-4925-930c-64ac8948bb40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.35.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8bd283-cf2b-4dd1-9d52-2dd298231242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.52.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f1b38c-eb66-44ad-bee4-c4f1680a1d43", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.62.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503c1fec-c7d2-4fdb-b037-47d1f60bea50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9206b8b3-a5b1-47cf-84fe-f62f2af3d5ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.219.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eb26cb-07d2-44f6-bb37-825382df6f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.238.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4576db-e0b6-4264-896e-b743750305a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.248.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b14c990-0ecc-4b34-8576-4cdf5bf62310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.253.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad54aec8-8404-4287-aeba-b78bdbaa446e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.1.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7704461e-2012-438f-8db9-f104d06544ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.103.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0593ac04-9297-4885-aea3-76ae1367b8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.120.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6700786-17f3-4b65-ab4f-c22b74e6c1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.200.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45be1229-30c8-40e3-84d2-685a86497591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.204.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a090af4d-af0f-4b5c-9d5c-610f72848348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.209.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34c3207-e1d1-4cc2-a040-eadabb19afaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a2d0c-cf6d-4481-b6c4-d56924eb3b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.234.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87adb15-2b21-42c9-94b4-a09e75a9652d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.8.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750ef63e-184f-4dbf-ab53-2dbd140e97d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.86.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d29cd5-d83a-4de0-8cd4-6ff27fcbd63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.88.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec33fc3-97f8-48a8-8051-6b86e991eecb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.90.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7127ae30-6816-4cb8-840b-0c84d240368b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.93.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4628a56b-4bc4-409c-b1e7-2021f37e0965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.132.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b04d7e1-6ffb-407e-91f9-0d3317ab4ecf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.133.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36866951-36e4-41ed-a3f8-078b693b3e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.140.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d90071-874f-4c54-94e0-d671a057f2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4a40ab-0c5e-4f99-a432-b0bd444815e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01f4410-bc40-4c10-982a-e45354253f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.184.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e4d19-eeb5-4739-a5e9-bb5db2094ea5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240e4dec-6bc5-442a-8611-edb4f1dcc5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.172.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b393caa5-4a2f-4915-97b0-df762bbd61ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e64cdbc-3a99-4562-852b-f715c89dc997", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.232.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82deee6e-313e-4587-9a50-4c2990427cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44da0825-5d79-4cbc-8176-4385d80808f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.167.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585f68a6-382b-445d-9526-81e24bfc0859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.172.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37f93a6-d6f4-4c8a-b31a-a1bf90bc505e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.176.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6d16b3-f243-41ac-819b-dafeb68aafa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.185.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbb4628-19ff-476e-b610-529e0047820e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.225.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312eb5bc-7ad2-451e-99ed-0ae93398ac69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.241.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6404abda-cd4e-4e06-a8a0-fcadf651306e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.8.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4350ea36-4130-4cc3-8b90-f0c9000fa71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.116.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5f1a81-76f4-476b-a5ea-bb62249535ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.183.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eb9d0b-f14a-41a9-835d-8e0528be8bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.71.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa03ff8-3912-41e6-a698-f9e43472c320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9256337-7fea-4f03-a91b-d485d0fe8643", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a20bc4-3c0c-44da-bd10-3ba6ec7370a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28335d-805e-41aa-95c2-758238bc2c6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753d4a66-3134-4b00-a767-c67b59f98d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.66.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32053d02-c49e-4693-8587-e6899c13b7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.124.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0018002-c37c-4765-8383-8e81d210d528", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.245.248.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0386d4e-eb7b-400e-a5e6-2b43c43d84ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8826ac-b09b-4a36-bd88-75acaf143d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.188.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df5160d-5326-4410-b050-32cf1219ac05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.148.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b69cbde-778e-443b-8988-1267797213c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.233.21.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e834a7e8-2ada-48a3-9b62-e8730f791a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.230.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27057b3-07cc-4b6b-b099-e01fcea33a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07bf9bb-ee16-44ee-84a2-3290de8919bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.128.199.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9499c31b-61b4-4e23-8e5f-a95e2c7c638a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.194.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bce579-b2f7-48c2-8791-8c410c39761f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.194.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24619267-a39e-406f-acd6-01c54678cfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6ec069-583c-4dd8-abeb-fd12d61f4268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc3db73-1adb-4145-93ff-cc7aa9e9616e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.203.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07a1e6a-4c24-4b35-b139-fdc3704d220f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.12.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b264ac1-afd1-46dd-8ab3-8f9310477d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d33dedb-d267-4aba-899f-e7fb545950f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ff2fd5-4881-4ea0-9e18-cf59879a890c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ddfb48-425c-4386-a4d5-95598333552d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5448c9c-4d23-44b4-b60a-d8430e868b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec000135-7a1e-4194-914b-bfa3b1ee0e74", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5539128d-b013-414b-806f-f1d1834a635f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da0ed3-cc3a-4e2c-9a0c-22f71bbac8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3a01c2-79b8-486a-8ba7-43d273aa3688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435378c9-4563-4d72-ac8a-2643cba9916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3849e4-7c68-452e-8535-8f55df9b81ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e6d5f0-4819-4ced-b1b6-71a208db271f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4b420c-143b-41fd-85da-633c121ebebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35431171-61ae-4baa-a04f-458f7a0d2a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210e6d6c-1cad-471c-91f5-058547413386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e29778-cf28-4487-925d-767727940419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4df44ed-9cab-42ee-9610-90762b0bad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddf4091-0efd-4b93-bfce-9cf4677849cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5270b702-3f55-4b9f-83b0-fee73e4aed16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f36a91-b285-40dd-808d-db607317535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a92c45f-2ca5-4de9-b7cf-00f0e1570b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67516aa7-e7e1-4f17-844e-29d8e448d6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f94240-9e15-4edc-9e1d-807bb5a70a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6367400-f3b6-49cb-b017-0e5740cf21bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12b0fea-7600-491b-83ef-dd5beb8e9304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d090c9b6-f189-4008-bca0-7296d93688c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.163.113.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a836e28-7577-43ec-ab28-11c69be46cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.75.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41061c60-bc50-4a80-8135-a9b96ebdaf42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.178.11.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9462b617-31aa-40a6-967f-3a7ebaf4c16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517f71ec-7e3b-47d1-882a-9ca86bc47374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70d3702-5cf9-4430-bfad-69e5c587097a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83494e9d-eafb-4b79-add2-94e2c14d9799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347bb2a2-9364-4fc3-a655-c68775139b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d252df39-7fe9-4a4b-9c58-1bdc93393ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088de312-4092-4860-90ee-53a0d363db96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f33b2b-1baf-4375-b676-9b79927b8572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877ce491-51d5-4660-b287-8b5c33e62c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79679e1e-eaeb-4b5c-be9c-c3e7adebe36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90141e98-3660-415d-b420-027212290cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c265c3dc-bea6-4a52-9db8-5388f04296bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21180bb0-b22d-43aa-a9c9-e5459a4afe9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5719e9-4470-46ac-bc4c-59c3fb0f26e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbcdb5f-c48f-4752-bc5e-402a392222b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23a55cc-b0a1-4d4b-8f45-58cd484299e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297b56a-dd9d-4907-bae8-85c840db720c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb07a9fd-4aae-42e6-87b9-74e22e142740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02260fe-eef4-4d23-929f-d802b15778df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5081ea05-5d6b-443d-9fd9-55aa989f6fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b9b572-10a2-4557-b5bc-5f3b0326d9b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.105.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f7b7b3-9576-4474-ab33-a1be7c09ec07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.239.185.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6609f73d-c9f5-4260-8ed8-334420af66c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e6ca57-070a-4de3-beb7-b4fe86ffc6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5a0fae-eca6-4ca8-947a-fa0c065c08da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.255.125.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a91012-e615-4b01-80f5-45023805bd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72b39eb-784b-4a4b-b465-f948add84808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b51a6a-3b00-4eaa-ac89-29d48956225f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78bf276-5d68-4512-95e5-48124b816ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ed2e75-d800-4b10-8e9e-b995f1055ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbfe27d-64f0-457c-9171-010402673fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0518b6a2-e79c-4b07-a9f1-1a2ef7de9483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7cbc68-25a9-4838-8de1-23e554e33601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97ffafd-dddc-4b88-8fc9-ecb9162b0656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7106a59a-4ce9-43dd-a306-cd84e54f2e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c8d182-e03c-4100-8867-6043d9f6ddd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe51ab85-91fb-415e-b885-5813293eec79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6903d8ce-3425-4fc4-8494-0aae54deca5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.18.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe5c12-3895-4be4-a81a-1a554ae61981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8611cdc-8b2e-4b23-b568-eeb8d75f419f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ab2c2f-5155-4e8b-9ce2-f66386fb6338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ca5e86-5c39-498a-b3a3-ce7f272cca55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2619d3b8-121f-4579-90bf-16379fa7f752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c477537-42be-4d02-ad6c-c7dc1dc7d4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9178b96-4752-4867-b29c-62905302a19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35b33b9-0c9d-4e05-814c-5ede87f78363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.228.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ed66c6-d8eb-46c8-a6e7-715d6b9ee54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.28.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cccf482-5803-4a20-97e2-bd67ece01d51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.192.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f35285b-c009-4564-b159-c5d7186b3946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.103.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f908238-ab9b-4a45-9d28-3e456b3fa417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18a51cd-385f-403a-9449-191705d66fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11bc4ea-5f01-428e-99a1-f56e3a18fc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7a3b93-93c4-4bde-b030-1fdc12461ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040c70d7-a089-454d-ab34-5c9fef97159a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22636fd1-d910-4810-8bf3-d6990bd78b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcaa6a1-e136-4a4f-a2cc-5f90b7f609d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dded43-d469-4776-a9d8-876c7c1642d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d144ec2-1a1e-4c90-bcce-82a94ff7d03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5db0da-6077-4666-ae50-932b5070f781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e610409-2be1-4cbb-9204-0b2c0732c0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48ce7f0-44fa-4b3e-8caa-c01a6a8c56c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845ee3e4-6f87-4dbb-a7b6-4c47b7ba3c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de93ec9e-1b86-4586-9924-527f3a4dd4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f83bc2f-8a46-4460-8c18-7fa46731fd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbc5a53-e22c-4b34-b22b-6d551b66dbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4e795d-1826-4d49-b57b-43ba93de282a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba93a2f-840b-4581-a261-30b9027d3fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6772c5-cc47-4680-9bf3-bc1c2aaed0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41253c4c-c08e-44e2-9e56-3a3368de5a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bc7e69-cd7a-4fef-870c-c302fb6d9518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac786ed-aeea-4332-9cc5-bbf40a7e4806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.187.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a514fbc5-6281-4e9c-a69c-b48b2fea3f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3adac1a-8cda-430d-8afb-9c3d4ef3986d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fca0a09-6278-497b-ac9c-3576fda4c5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1e5a66-ca63-4b9c-9159-2697eea58b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438ce58d-9086-4916-83f0-9b24938abe4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1dbe50-5aff-46b5-9228-c973f6181d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99721726-f0db-4250-af0e-8c78d876eb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f190f316-6269-4bd4-b1d5-7a7f2592908d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d10ad7-8c57-4015-9858-7893620c9cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65050f2-68d6-4723-9356-192e6363ef76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab17be4-5aab-43b3-8524-5a2e4a393c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53ca072-9b70-45c1-9697-a91718fa5bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35a9686-da68-4f8d-af74-538c42bad396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c374ad4-4537-4a62-9c36-f483c00f38aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40749676-97e1-4f18-99c8-a867cf4849b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a34483-3730-4381-abfe-25fe37f9b615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4df722f-6909-4cb6-95f3-0eb817c56863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c702681-0561-4424-be09-51a13b06afe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24863db-2a41-4d26-8af6-279b66cd893d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a489c6-e2f4-4a89-895f-8d1c17eeeb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e584c86-40e3-4927-b2bc-f5bb5a1f38d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eaf881-e3a3-4258-abe2-1e68f878797e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e90a68-4f3a-4f33-84b2-55bd7e66e342", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d0f929-8dff-49b8-aff5-3284f5bd808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049f9321-b629-4a30-a823-0d5885bdbbfa", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa70cee-a2f6-4eae-abc8-2be8d433f6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdd54c2-ba9b-4508-a4c5-b6146a29dbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248d1fa7-be33-4e82-945b-466fb0bd60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.162.203.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d8947-e422-4334-8ca7-cd347ebb08c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0bb508-e120-46ee-92e1-390fbd26053e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e636977-8cab-4259-8221-2213e18c8c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a579526-4465-4692-8964-79fe80394026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68d9c28-4393-43e9-b768-cb03ececf6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.26.235.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a9bb7a-a8d3-43d4-a2fd-c8f020b7c8f3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.102.100.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81c0c66-4831-4b08-b064-4592329dc5a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.106.188.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cfbc0e-596c-426d-adae-2ef863a9b2c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.117.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333e7887-7f1b-4c2d-b698-92e2c311b05b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.148.140.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29685180-a1af-4ff2-8af8-2f4160c8f6ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.165.11.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5312af17-bc54-4a1b-8561-91f0488cc330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.100.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dbce54-76f8-43da-9d82-51f165bc9cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956f9ef1-b165-4af9-a89a-f5b90fb13a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d490a245-ca7b-41e9-9e3f-528052c87a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.133.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534bc0ff-c1d3-4b19-b340-ca43eeea8d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e93bc87-7a52-467c-8926-e7c1f71af4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.240.60.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9179589e-4581-4d11-b261-fa5d0e28f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.22.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d3d32c-9a3d-4a49-8035-e5293cab2ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab18ae7-b5fc-4c2c-94b4-dfbc063e80c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1bb86e-cda8-4a49-9ac5-c6b960ee0663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a668cb1-5112-472d-8d7e-a98bbfa965f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba36927-8c74-40bb-a24b-45e706a54820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e864f5-0c36-416c-88ba-e9141719d35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8915d884-8fd4-4ba5-8693-2800ed842315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a918cd-3e56-47ec-a705-09815ef0cb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c81c41f-d340-4e01-a4f2-aaf61a4d62b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe772c-ba4e-44a1-81b3-628f6b3507bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.95.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6809d978-a458-4d2e-b5d5-da46137d6a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b262de9f-36a6-4cb8-90a9-d74d35f6f766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1425f8e-06a4-44d4-9f37-bdbbc89a3c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.221.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a5a9a2-0e18-433b-bdca-2347891ed4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f3a30f-d08b-41f4-940d-896b44f46858", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10d3764-74f2-49de-aac2-28f8f3f0addf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6afff7-b0c4-489b-af0c-a7a2f57b9ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b75a729-c832-4ea7-90c2-d429ef527bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf044a59-66fa-428f-bf15-9eba3dd5d2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e121ccde-bf4a-4c18-bd31-1b55961385dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116450ad-7ef0-46f3-883f-8535f3d9e579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2c6eba-7fc7-4e0a-b5b4-546b4cdf4667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b34edf-47ed-4943-8374-399b753af209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93e91ae-e00d-443d-b8e8-7e9d98caccd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca88eb5-dfa5-4f90-98e8-451495c128cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b91bb5-e0a7-41e3-959a-5c11aa7fd507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.188.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3133bd5f-f632-426a-8946-d3dd8b14d8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.246.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769c2321-da18-4e29-b884-0171d08e64c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1404fc-6cd3-4f77-9e9c-8334083558e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f85a5-c3b9-41c8-a3e6-cc29291da625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951f2160-59d7-4008-bb97-b6087a6cbfc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d4983c-9bd9-4057-957a-d1f2f8bf2748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.66.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e379a8-d566-459f-ac29-338f8bb8e99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0caf5f58-ebdd-4747-83c4-3c005938dbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972d7c85-4818-4ba4-baf8-1e0c47d7cff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de70e4e-f37a-43a8-888e-3532c36c6145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e32dc4-a07d-483b-9301-b494501bdfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.53.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce27cb1-6ce0-44c7-a043-37ccc6842afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e47b6cb-becb-43d5-893d-b9477489cf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfe2ceb-b28d-4717-a2f6-95005acc0cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e657ff-8e04-485b-ba3b-ac59a215b8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7429c65-48e7-4acc-b675-94401df72997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3aac41-488b-45c1-878d-a864b6ba4056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327107cb-6741-45dc-bff9-710dc88d3701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0a3edb-4319-481c-864a-c14e1518bc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5eab79-49ad-4ea9-8de2-e91b65e51345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.56.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6df98e-8687-4dfc-a493-19d03fadd12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6b22da-a9bb-404d-8e3f-cb8359415ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59c0827-3584-4da8-837a-b6fc470af458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ac7189-5ba2-416a-a32b-4a0c6d459713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f9db49-38b7-4549-b6c7-293f034314f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90175fc-370c-4819-82bd-490ebeb0bf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.2.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00768a94-1bb9-41fa-ae40-f0719b6dd75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8146aca4-2d84-4296-a872-9d9f8424f8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2902a85-e3c2-41e5-ad55-7d3003458b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0dee3c-42cc-44db-8afb-a10747935e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0da0c1-be0f-4b44-8c09-837c6f700358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda1cc16-203b-41ca-9fd8-ac59fd2a6f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84d2bef-3921-4069-96b4-420a4b8d464d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc1b380-3bca-4453-97f2-7fd47265464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec271ce3-c66c-41a7-9b7a-7ad5075bd926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca3dc50-2f31-42e8-9a23-440d07ebeed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526792bd-9e03-4129-b3a7-1f7165483494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2d94ca-2f3e-4898-b515-7a9ed911b4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b335d487-575d-4c47-920d-115b6a4c452b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43d01f8-62f2-4cbe-b9da-f5e5197f9ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.170.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061dd6d8-e56a-47f8-b61d-952836459a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.5.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8658a168-dd4a-495d-ab04-61ecf7a658f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.66.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333aad3e-eb9a-4bbf-9f46-7cb86985062b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.209.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111564d3-6c4b-4dda-895e-10ccc555e23f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.92.51.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5743ac-ffe5-4ed8-a624-c75a0afa8ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74532275-d661-4b32-960d-ec92f1298702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a4620e-ced5-4d1e-85ce-fda0f4a558ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22afead-eebe-46e8-bdd1-1a771a7691ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.173.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251464ce-cfbb-49c1-8c52-750e55e485ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.195.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eb28c1-4f2f-46b3-b027-7d4b071aa15c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f524aa4-df25-4a39-bcd9-28e3aec2c756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.104.87.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283c352b-19ed-455f-93f3-a6e5670b3e99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f12b25d-6d38-46ae-b2f9-fbfd3c03cedf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2414fc90-738a-4df5-9d1b-d68bdaf2f1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41141c5f-2750-4ea3-b9f7-b422195f03d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5d3a3d-752d-4f7c-8670-7b0b9e65f8dd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.199.233.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1290e72e-f601-40ce-beec-8b967c6f97b1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.200.210.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef0110b-7868-4faf-8ad8-bad74287ec49", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.223.49.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1984155-9b0c-4f7d-84b8-9c9420341c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e235424-5a68-4ba4-ba00-5e083346bd81", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.227.40.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6655d268-4218-4bcc-98b3-d8471249c43e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b905006e-dd05-45ad-9b3f-5a0b30053d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8900e563-963d-4079-81bc-fda53cc75feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.146.197.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911e0314-c6b2-46b1-8324-fffee38c084a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.242.76.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fb885c-55e6-407b-ac29-767057ca430c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d16302f-a5aa-4e64-980c-943aa19746cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e53159-f8a2-4c48-9666-68b39236c43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b461f93d-7a52-4693-83c5-088257425ce0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.136.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563185c3-387d-4298-bc41-6b8b81640b24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.194.199.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139776f2-2a1a-4450-9a8b-c8c59c93189b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.4.106.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fe9e17-8d02-4bb8-a0c7-b0e31b5a19e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.4.97.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aa22f0-928f-49d1-81b8-a7f1c59ffba3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.226.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4620024-82b9-408e-9b66-536cb3e1e049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.152.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfed08a2-dc37-4908-a3ba-2ae07ef78bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ca4d82-5217-488c-911a-33fa1dc9ca2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dd02ae-654d-44eb-b784-d936b3e59d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.219.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ba0a15-59d7-4ab7-99ea-58b562850c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.230.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ab6d96-b3cc-418b-8424-2cf2ef07b10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.230.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db748e13-3208-464f-963d-6b23f53acd82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.102.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d955a7-8009-41f9-b362-a0baaa20f776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.81.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e43e5a-7168-4421-9027-eec7e106f139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.96.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da3b750-fe34-4611-8ed1-66f656b4f56d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.111.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d103f21-d483-4a92-9eea-241579f54f7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7b366c-b7f3-4067-8288-a91b0f28bb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.91.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed25e3ad-e91c-4cbe-a1a6-5bcaf19c14cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.92.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fed7b5a-9de7-431f-aba3-5d13fb0a1867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.98.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10938e83-3624-4402-9655-fd0ea690cb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.169.144.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874dcb3-b550-4462-a4e5-3dcdc016e476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4f7ee7-5611-4dc2-8a28-3c81e0687571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.184.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be4b6d3-ee3b-435d-9320-48c32fed22f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.225.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1828e08-e680-4a73-beb8-c36d4fb4b845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3232201c-bc2b-468d-9423-b9c398a00e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.206.216.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7448bf2-4473-4c2a-8c86-e6d79c061636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93847d7-c85c-4f1e-a3d5-83fecea27cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.5.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce46c90-2302-422d-90cf-b8a48de2d0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.129.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307affda-690b-4dc8-8686-399c0a2e751d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.228.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd86e6c3-a952-4d3e-b2b8-0caee43fcfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.252.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af1e20f-e0d2-4f5a-ae06-b5a9b4e92e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.51.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1791279-715f-457f-8f1e-1b0e5b4d898d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.206.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758f7914-2d51-40ee-b1cc-7c0f535f65ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.60.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b3c359-0cd9-46bf-bf3e-4763661b85c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.71.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ea43f-2d8d-4929-b215-81e2b646f95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.95.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851ef53f-8c7f-432a-8e7b-5b470a29ed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5f9b9f-88c0-42e4-a54f-3a6f313fdb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.149.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a92a9c3-97b6-449f-8122-cc823f44a819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c78ad84-7dca-4de4-a392-a098a3148402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.76.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c01c9b3-0278-47ee-98d0-26a946ca1f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.67.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e996e781-0e8b-445b-a3d2-729c31dc31d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.196.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883a2c10-0603-473d-86d8-5b19ba09de14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.239.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a889721e-538d-4b77-89dc-ee938d49ca4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.48.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53cdbbd-ba7b-4e5d-bb1d-f578344af2a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bdd5aa-b727-41fc-b881-38941f0cbfe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae677eb-f401-4404-8472-2543e447e308", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d56ce6b-34f9-4a34-acc1-32b74cc44000", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9b7823-a687-4d0b-a512-e18d53073f2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0d4766-57e6-4096-ab71-725acf28bd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.209.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed369cc-8473-4753-b4cb-31288c4eb237", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.186.20.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6a5757-7560-4aec-8a96-41a01f469acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.242.187.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a61e60-9295-49d1-9435-2bcbe2f380ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.111.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5270b03a-c656-4e3b-9d63-4f0154b59817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.47.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5db3cb-bd88-4f07-b19b-e84e9d311bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.220.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db54a7e9-6694-417a-b0b5-776406f28488", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.254.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1578bdd-18f6-4378-b335-4766f458d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.1.21.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a586494f-6347-43e7-af91-f573b68fcc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.12.245.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b51b2e1-019f-4982-98b4-0a64d19b6af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.202.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fec4be7-a3b3-4efe-a5fb-d8fbb91f55b4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.23.232.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7360b663-d55e-4d5e-8054-985bdce0937f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.160.221.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c78f19-cacc-470a-8536-d344a6e1b437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.29.249.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ca7a84-0e4d-4433-b122-76425dd4f954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.77.88.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f238c-630b-4e54-bd4d-c65db0509319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.60.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d137df40-6bc3-40d3-aa6b-883a7a627fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069853ad-8a01-49cb-a9ee-2c27b036edd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d745c5a-526c-4554-a238-1864883a9e1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924d4819-6fed-450f-a391-a4ff57c0ca58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb6b841-b708-46a8-991f-876ca3000b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eadca8-90ce-4088-bbac-b71a20aa804e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dc2578-fe40-475f-ad1d-c96fb5e0d8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1667c76d-eee8-4133-80aa-f0fa52206eda", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6065efb8-7e85-4e68-b59b-400fa76e5d4e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.207.185.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6d1eb3-c4ee-4e8b-8d52-8f037284453a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.60.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63df1a37-b5d6-445b-bd4c-42173f206b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a03d561-f3dd-4ff3-8e30-61689ebcc225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.65.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc56de-f8a2-4766-92df-e774fe2aecb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0321e1a-c9da-4cd7-adfc-cf4be55ed64a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.91.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30506fb0-2a2c-479f-ac27-abd4973c9597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ee0f97-8c2b-4c9d-a0f2-28a34eaa0ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.97.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73256f58-3500-450d-a3f9-938742b8934a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed97821-3c2e-4cb1-b078-8fd0c2648439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ab60c6-f58e-4ee8-871d-51bba81dc804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8efa49-a643-40ad-bfd3-1964d56d7260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc4e12c-0bad-4cc3-a3cb-b398ebbc5b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508bacdd-6c8f-4a5f-9ee7-3998594a3d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218420a8-cfd2-44f1-a009-51075f3067fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a896d56-600e-4264-b9a8-19dafb994713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3a7e7f-7466-4bde-91ec-8bd3e732287f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acea9b19-45c7-473b-a26b-a0049478a7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd7715a-08d6-4752-a9cc-058781fe02cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99921183-59f5-459f-aa43-9231201df3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1194fd9-81a8-408a-bb4a-5858e7385b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dc3880-bff2-441e-8219-6b3e2c4d07de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2054d253-bbe7-4ca0-a61f-4904b8a0af22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398384ca-96cf-46ea-9ae7-7dae61e1e344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4877d205-fbcf-4c13-9e9b-c5771f0659f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd5919c-3ea4-4e9d-9da8-95366812cfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dc4d25-f327-47a8-8375-cf46fa467d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96604d19-13b1-480e-ade7-7db12565b921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a97ab88-93e7-431e-afd3-9ff8dd1a0569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56318b4c-6a56-467e-9d8e-b5e201eaf162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f03c25-dd7c-4e0d-a2aa-2dca2713646e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25603cb-b178-40e3-8bed-52c21c1f2736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ea4f65-36bf-4b91-9133-a7f254160134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5693beb4-b5a9-4d4f-86e5-714477e145b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d412e728-cf26-440f-a890-f14107831286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00310761-c96f-4464-894e-1001e3cc828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82e495f-21f3-4c6d-8ddf-89dc7f815c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7880d36-09ac-4c10-a900-e216a9b1a180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b78f08-916e-4633-9b37-8ed97ee46315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29617e5a-3b3a-4508-b3dc-58d36452b741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9a7e8-6d8c-46d3-b953-6498830bccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6789a14-bc6e-4c52-9f34-24076ad35c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9c26a7-93ee-4da2-ace0-a8ad119dfa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa1a140-0846-4650-9420-edd209566284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9072491d-70e6-4a5d-85b9-b405d76d8a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48db4452-d8b7-4aba-9954-014bd7b556c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4dd6fc-8388-411b-bede-ea42fd6940dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e19953-dc87-47c5-afd7-0f5a214c3d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f07dac-63a3-48fa-95e1-98e2697ecd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2499846b-21f8-4a6b-8ce6-746b7a2291ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f15cc54-326d-46fd-86d0-d93df97faad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa6711a-65b6-4f31-a1e6-0f1c9278a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df52c0f9-6b7b-47e3-9281-40bce1ce62db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63150c56-2229-4a79-b0c0-8a6a3a3e150e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492cc25c-5106-4e36-ba0b-4568380add19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225cd763-914c-4141-ac8b-92a69bef0d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcbb87f-933f-4bf4-b311-9b1fed8b740e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3036b52e-0fe3-4807-a6ad-1ff495673017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb02dff-9ad4-4e8f-807b-53718471d879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd45916-9738-4a89-8d83-f42a7fbb20f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1d5e2b-0246-4185-83e8-e10e0539e328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a75e74-a465-45bf-8365-bb3e977bbaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9556557d-2c2d-4105-ac4c-d6a8c3315163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff53d4d8-9f87-41a2-93c5-cd5f8cd8ca80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2782519a-f853-4e72-931f-8ee215874bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d158249-06af-46d0-b43e-7017124f2b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf99d3d-39cf-492f-a308-f9f54d01892c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab15798-0f58-4d62-abe0-684bc27932a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b07273-bb84-4087-8d36-224389e63996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b1e323-b94a-445f-b8f6-0bf253fc4466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ee694f-972e-4de6-9c10-8a492ca5b228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7aaac99-601a-42a6-a3d3-5fa38e0c7412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dc0188-2f73-4283-8be6-9dbec7522323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5867bbb1-df3f-4004-9580-eecbb40c2e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b42c437-088a-42be-9935-6be0487f4235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70899a53-e284-4e68-8887-702749c47071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16113709-0fec-4fec-9d86-4e2b667f06d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63297e0d-f823-491a-80f6-46b137e431bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b817c7-fdde-41ae-8b61-2922fb47f473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15662f56-7a90-4089-a96b-a21b8ab4a65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9713600a-7721-4c65-980b-beade325e51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b86862-d1c3-47f3-bcb6-4839a9a81527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f603f7-5601-44a3-b045-662aa1bdfe95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ffd9ed-4c69-4d5f-9598-72a4c0926ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ca6f5-cfcd-47ae-bc22-d48410c79917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7758682-a338-44d4-8305-69000a99c5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379d37a3-5794-4f79-8e02-b1962c837639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5b49b9-a5b1-42fd-bbf7-ca66e0949290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a871dfef-a274-49ea-a358-680181b4b0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96938b3-4865-414e-b7e0-7d55e1f6daa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a975b329-9d67-4780-8803-bfe3d3a1d38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a8f6e5-f5dc-4af5-9bb1-638f1416e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbd1864-4f49-49de-9df4-bcbc09eab73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edaebd11-812a-45dd-81ef-e7d7f4151910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7f90ed-1265-447d-9ace-0a832cb6bf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244989ae-fd36-4ea9-a7aa-e419c650841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebf2ca1-58d5-4424-9971-4c1102677b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6b8a99-2e3d-4673-8cdc-fedfb3416889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d023862-67d0-4c44-a1c3-395a92db5aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c61fd3-2db4-4e12-887c-ab85adb47064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6317d670-8fc9-44f3-aa23-3f6ad496cb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b80514-ec8e-4220-9c78-080b952add3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d6719f-0359-42d7-8a83-1b7fc962b71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041c06f0-1dfc-4118-9c4c-100eb0e94d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ab7d9f-eb26-4bc9-9e0b-1f5bdc7472d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31805f85-2a38-4183-af3c-77cf4bad480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f3f6fa-5040-4642-a50b-6ddf66a937c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceea20ea-4ac4-40d8-af4e-875c1aa3b639", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d3683e-b09c-4e92-ac9d-9d9888961dac", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0655b3f1-46e0-4310-9a26-dac61a9764bd", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd165771-14e6-4c07-8090-f1b30ba8c0f6", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67591ec0-8c3b-411e-8411-af32ed295f39", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393c332b-00d6-479f-900e-30c341a46e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2884bede-4f9e-440b-b6e6-1adfbf1287f5", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae0d5a6-098b-4624-a8de-5ae32dccfae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8df294-4e01-4ec5-b2ec-863c877a7dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35c1280-5a29-4ea2-bc34-f2b2cb81913f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2103cd-bf8d-4cd9-91e3-f4b867c6e360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689f1e7c-6ef1-488b-93dc-a6f4d10d5132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2854e7db-ede1-4a90-9bc0-9a1d0e94b19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6ad245-e4cf-4b0e-805f-7fd808f72417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f53151-04ba-4cc7-8c2c-92035d543c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58aeb90a-4861-4d13-bb35-bbfeca706697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ab8b89-3659-4638-a618-cab34c3b7698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d7925f-0f3a-455b-8acb-93d30e346c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7293ddc3-2595-410c-89fc-c35c947671ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02d1ab3-2320-435f-aab1-8c72d1601693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7028aa1-984f-4262-8bcb-79ad41943d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d172fcaf-37f5-4062-bdf1-45775f2b622f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93fabff-6a04-4dbe-8bfa-413dce05fb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4d25da-baa2-471c-8622-b15ba3d74351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f342b631-5ff1-4e34-b367-2930976b3c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65854e9c-8b8a-466d-85fd-efb5821a1694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127a90d6-877a-4b58-87c2-8a5e0e4688a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee4bf29-b7c3-4b4b-bd95-6ad53c17a9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264697b9-6bf2-4975-b990-1cd1da02919c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6a6e71-0a80-4fdf-ad5b-d4a67eacb6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3084f7-ed6e-41b9-972f-e860a9a64d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e88e845-da9a-46fe-a475-c3ce456836e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167e7ab4-e496-47a8-8774-da2dbac68614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4981f69-4b78-4155-b4e5-eccb18f76896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6b9b55-8cb8-406f-99b3-c608aaa76a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a703dbc-343c-4f7d-a077-87dfd920d998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e81d9d-bfc1-4c06-8465-ee77f957e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2958c0e7-bbd1-4d4d-bc2d-fb07dfc1acf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd56b288-9e6d-4e94-977c-c41105de10af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f99713a-80d2-4589-b62f-988eff26111a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bc9edb-34f7-4fdb-9b97-4c956e94b29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2c9900-6216-4cb9-b8ad-70b278682288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85fcee0-679d-4a43-8afb-f6972b963852", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c574155c-57a0-4873-a3be-cac9965ec6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d945436-c9a3-4a42-b105-5b86576b52ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5151bf-16c5-478f-affd-d053654d1e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f66cca-042b-48d1-ae99-9b259a757ae1", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed9066a-7671-401b-a020-481ccd913229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a757de-54a1-4184-bb32-064db97a7cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3099b813-d534-49db-8cbc-d7de83624c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7463eb-7769-49a5-94ef-e80e8dbc241b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c639f424-5daf-4a7b-9093-cb867ee94ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57ab982-72df-4b8e-ba10-c9432679896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd31a53-f13e-4309-9bf6-5e353bf23076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d98c10-6400-4fa7-959c-f4ec27ba2741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3642c6b-b4e8-4c56-a3c8-926ae4a0ce1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440e44eb-6dc0-451a-b56f-7b0e39ac8e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0fd924-8e82-4beb-956d-c53c6e949c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966afa33-f412-4537-8182-df22514fd25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db24407-d8f7-46e3-a848-ff81a59ba779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67182e8a-5653-4fae-bc5c-3048a8269e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b107e427-3236-43b4-9bff-8f1df4fd26c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab430147-5bd0-4244-a601-ded00508260d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd958a3-40d5-44a7-9ca9-6d7b7e0ff84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb8e990-9304-4d07-98f4-c71b52f63475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec04e707-94e4-4124-b386-b5705f57bc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0d84fc-bbc1-4fbf-b5cd-796e162435d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.73.61.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deefbff-0cd4-4b1e-a515-72a2998f35fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ffdc0c-1e4f-497e-b286-90b444c576bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26594d2-55a5-40e1-a343-7960a2a6eee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e99c22-6d89-42ab-a948-34fa0f7c2f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5b8d64-0d0a-47ef-882c-1e9ac6dc2a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8844a7a9-d630-418a-a6f2-fb6cb5f38dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c0aaaf-5294-4ea4-b056-9256c2684344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e2c916-7b9f-4482-aa27-4736a2ae21ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfd0be9-5078-4e03-82a3-50408ec43ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e761bc-0f00-4d35-bb37-0524fcf896f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611597a4-5f55-4231-8333-7a679abf34b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fe8d73-1e1d-46fd-9310-5193738b447b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb06b45b-a294-471f-9a15-3306a52eede9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be33fd6e-d02e-480c-bcdb-09634d7dfeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a815d5d9-ec9d-4564-9f52-0e58d938d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df67f26e-302e-4281-8ec8-603ee2c10d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cc5a5a-ae52-4477-8249-1d39b3aecec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b0cbb6-d566-4e3f-b3a0-0fff31b2677d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b7e73e-42aa-4aab-8513-24589244c755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b94c244-ba7c-4b2c-9006-615100b6cf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa482c37-3e32-48c8-b0b8-9d2a2aa9f50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8720288-08a6-49ab-a106-b33c89daf4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebc243e-6b26-4e93-9005-7f9fa45c5a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4a1c98-e46a-4f08-af4d-507267aeca48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7e2b4d-75a9-4482-93c4-f3bef355ee55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f28df1-ef27-4b8f-bdd2-34df25d088cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2191ef2-85d5-4012-8e9d-0f72109bc4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50ed7db-ee78-4f62-b480-2e88308c023d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dd4fd2-eae0-4eb6-a469-99e78879f671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18bbfad-54ed-4316-98b0-b27063306a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3041fe43-1719-4951-b808-63a4876b0896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df5e962-7be7-487c-adcf-3e3e15ddc279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b135ca-d27d-401a-b478-5fabb4912aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0fce8-81e7-48ff-9dd2-4442550ba630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8cd392-4c22-43a0-b794-a2e27be20593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce46edc1-406e-4fa9-a2b8-5ba6960d0058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7c4055-8638-4847-91a8-b94ae13f1624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f461c67a-adeb-47fd-b39b-d32628945ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8449f4-148f-402e-8871-93d368222f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6083d923-e90e-4ccb-bb5e-59c68c89204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9085bded-d07c-473c-a35a-916850cd3741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4282218e-9db0-43ad-a660-9340c2e09234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7139379-2522-41a9-b179-387c998a4077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a128aca0-df1e-49da-868b-e494cb10ac39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4828baa4-a82e-4701-b8dd-162158c6d305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c0235e-a3c7-4f05-a640-01fb6188252b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c22c0f8-5da3-4b87-a86a-1044e371ee57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73eeea3-bc5a-4564-be72-c0b43fca1336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed0dc9c-e3d0-44a6-a2c5-7971756eea22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f48292-0f25-4d40-84ba-9dd30a5b0214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384d28cd-9480-41e2-897a-f94c3d7aeafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623234b9-e9eb-49b9-a594-f10ad50644d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca34643f-3b89-4780-a84c-97855153e45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78334fc7-5bbd-4503-ab94-a13ddb754c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38e3092-8c9b-4800-8f52-967070d5098f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1041045-0bc1-4672-a818-3e7d419ff2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279c6c05-0db6-44da-b0c5-4967650f74c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76313881-039d-4895-aaad-5a0f73426003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bc61e1-6b4f-4b0c-8abf-352a744e6bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea4912f-9421-4a13-ad34-9259db134f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f33842-ba6c-40fd-8971-19d8719f93e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c4e90c-94a5-4d19-bbb9-2e01c0f7a08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b32999-891f-40d2-a35e-3bbfbbe45ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9849d2d8-08f2-4982-bfa9-e7d765efee8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974ed188-abd1-43f8-935c-953b2cf1bbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7938ee3-96ed-4e93-bd97-af1ad9985bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b39c76b-feb4-46f8-85b7-b0d262656127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fdb51f-38bd-4bca-914b-eb6d6a30c795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9455322a-c3aa-475b-a13f-ee9a8a0fe9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87c1a9c-9664-49fd-ac45-7fe4907894b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182f7da1-4c30-4cb1-a9a5-3e4e0e7b97a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b078d1f9-f202-48e8-b21a-da888911c897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b658ad6-6b2d-4aa7-9bd0-e809f6a6ddda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590b7d41-9c01-48f8-b5f5-5b2d9840713d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fe8aaa-c831-49d7-8429-0ad7fe2e80ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5490ee75-855b-4673-a9c2-4c159d75dcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19697a9-b543-46bc-9a93-5c10574c855c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba46d0c7-e4db-402a-841a-f7ab39eb6b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9add8c83-d0af-433e-a669-822ad81e6a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b509e2-d670-43c5-ba95-11c4b49404f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c27cc7-4279-4fbd-a546-fd972ae5fb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed7f96a-e344-4f4e-83d5-8df876ca0e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd31c28f-ce03-40de-a0a4-b47734c6654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f184296c-806e-4efd-b8f5-7a751a74e77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a888dcd2-7f51-42ca-adf0-676a78f96da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd951384-bc11-4411-9d16-4737d70ec392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac877e6-9b30-4254-b3ef-d85aa3cf1ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eef8dd-db8a-4f03-9539-030673bc6242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d9bf2e-dbdb-46fa-9db7-108ff51060f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a1911f-f8fb-4038-97e5-2d5bfb64b744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee918d43-c723-4a70-b6a6-2ec8b70ea343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b935b0-1306-464b-b0f5-adb1f5603d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c8b92a-38e2-4da9-824c-414db6b5bc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fb04e4-0031-466a-b989-c97d05191bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c9c767-b56b-4638-a488-eb98865ccae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8799887-ba51-4f6a-84ba-3acc0cd9e10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd9ac4d-da4f-4956-a017-f77f7d47ccfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6fdbd5-3b9c-4ede-8b75-5c4ea237d588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f696a71a-908b-4d56-a23f-0c995bc9f78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bec530-60f8-479d-acce-83fe4c0cb6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bfd489-9727-4e60-8a18-a441ce441d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0588072e-7c8f-44d2-8275-01820cee3bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b5cf7e-ee1b-4489-8f46-f6d33a435cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5863eb-f470-46c5-af07-233ddd6643e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f4dfc3-4c24-4360-9ecf-3c2e1455b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa54a32f-25f3-425f-b792-6d82a725bafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debdc2b3-24aa-401d-b12a-9d040a4138aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be63b75a-a687-4c9c-8087-7437ec1e3cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7bcd7b-c845-4e74-b489-49a004dd8d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.165.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c570dc-445f-49f0-bd23-a30346c91e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94263cf-97bc-44c0-b593-a5ccffede676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16327a47-b791-4729-9a8c-19ce89659f1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b43cf94-13c1-48aa-b461-745119b29d6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.77.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501992c8-6905-4448-b6cc-18cce3619205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.77.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47ed646-2137-4e54-9091-0c8873dac434", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.77.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57afa965-8df1-49ea-9362-dfb77efdc474", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.78.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228465b6-c980-4d5c-b929-b8494c89d45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.94.126.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b261624-058e-47a3-a2f3-72e7d5b88d01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.186.105.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9914d9-9e4e-4753-a417-a3d4346b65e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.130.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac343ce-c92e-485d-aa34-838f9c5f58cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3741305-3271-4a19-ade0-1423db319def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.122.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d72ab3-8bf0-440a-99cc-718cbbe6113b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.124.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58d50bc-6c85-463d-8ef6-b680fc952bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.221.112.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925296de-f580-4f9b-bdc7-d85760b8cd07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.221.17.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772650ff-23e2-47cc-95eb-206060894a9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.36.218.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb77010-6409-4c83-ab55-6067f037c339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c5bb82-a58b-447d-9576-6100bc6dc30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca53c76d-c12e-4cf9-8112-deb29a33a556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.255.22.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bcb5fc-3708-4f20-b4cd-8a7bf3662c26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.23.53.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d499093-54df-4f24-a2dd-ab1f18e9c584", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.54.182.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba50d14d-1aad-4418-88d4-95fd6ebd26bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.146.124.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a8eea3-24ca-41ed-9ad9-128de5d4387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb4c29-9972-455a-97ca-feed669e0986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0acc818-2ba6-4cd0-9f3d-e61718467c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53592ff9-abf5-4354-a98e-690043ccd7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b03c414-a77c-44c1-83d3-9a278f69d2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d4d88b-a3ab-47c0-84f5-b58b596c4773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307ae6ff-c2c0-4c74-8a99-55bfc690df51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108220cd-69a9-4cfc-b5b4-9b14e62ff709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3704a76b-0702-4800-a90a-a7bd64b9d8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.62.97.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5cb2c4-54c1-4acc-9530-feb173d20a69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.74.3.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c96b931-c2ab-4457-92f5-23bb5efa4ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.78.65.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be335d1d-4efd-495c-bdb1-65b8f2b81225", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.240.125.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faaa1a3e-e118-4517-ba1b-26f0e6b30dac", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.52.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab516798-104c-44ab-a4fc-b4e49b0fe5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.60.40.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404da3c1-7431-433a-a100-4d913cc0b80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.176.23.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63628cf-a199-4dbc-95e0-e704c53284f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.29.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366a6a9f-77aa-46d5-a390-47c48154e257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babd51a3-2a36-43b3-8356-f45009075c40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cff815a-397b-40ab-8d9b-2ee27d695e83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30adb5e2-9c64-4825-a4f6-8c94e17e7ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fa3116-a16a-49b8-bef0-3d8b5ae4a8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8479bca4-d013-4fd8-a426-b71ee76a2b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40e9a2f-9e69-4243-ab01-0607768302db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47808511-3791-4ab2-8ae6-ea6bd99878ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab25371-c309-43eb-ad2b-2e376df247fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.127.6.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22762a83-a273-4dfc-a878-59be317e4019", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.137.97.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6b75d8-381b-42e5-a5c3-f58878d5f907", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.206.35.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de30688d-3ea5-4287-b661-bed94b7413ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.111.100.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3588e351-acf8-4742-85be-058e10f1f322", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.129.23.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76117850-4882-4d30-b168-88ce63afbb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.14.106.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c921c7-e879-4549-903d-1959f8e2e97d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.36.182.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bac3f34-932d-4563-b76f-0585f3de8050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbed90b9-cd2f-41f4-bb3a-5a95f21e1e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea1b7db-cb86-4f46-a569-b381318e9421", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a302e91e-83ab-40d4-81e9-6de15076037a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8268a4f9-6a95-42d2-937e-6489731465ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9473963-1df8-4809-b1ab-4d509d7349f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.90.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340af4ef-4776-4ae5-81af-a78d13c4aa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa834645-0a7f-416b-8803-ecc123e42d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfb2575-66a5-40a1-9798-55ae749bca73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e512732d-4162-4813-bb44-a562ee63c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04561f2-9e93-4e0f-9a52-311e1871a183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4c4c36-8cbb-4936-86eb-8b380d306cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b69aefa-837d-45a3-bfff-7c7eba7bcaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb5da41-de1c-4be1-a4a2-6a32b80d21a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e3217-c065-4084-91f3-40d89ca4f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfbbaab-47bd-4b90-ae7d-1bb8fc64cf81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24456d55-d09b-4aa8-84bd-5afa6e7f95fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2235e4-095b-4c88-8680-ec5fb970dd0d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a861da-ccaf-4715-a39b-ebd2fd90fc55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ca64fe-da17-4594-b132-9d54386c4c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c689c26-8e5f-465b-b79b-7bf1f0045f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5f8254-8a83-4ac8-ae94-45091092bd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb68d37-5343-449b-a615-64dadaa48e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2124b32-1995-437b-a30e-36cfd056de88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db45310e-88c0-45b8-8a1e-81cb1a5cf742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e420d27-64eb-4f82-980f-507ae4d0e770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9690fbf-ec5a-4a96-9337-8bd0a0b0e733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd3313c-d4ee-451c-b33f-0fdb6edf5d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527950fe-c5a1-4f12-a497-c3c25b385de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfe97ea-30e2-4b00-b638-7a326c3fbdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de9cbd1-0d8a-498a-86d9-f02ad9a2bdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381470d3-f899-47ef-86b6-bac015600f89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.162.73.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5221b841-72bc-48d3-9dfb-2d0f9744e2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.169.143.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464a3bfd-f7cc-41d5-b075-e38d0c6d2366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.215.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2de2ae-fdca-4e91-8964-52fcaf415eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.215.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80a53a3-bcf8-4cd0-b68f-c2158a0d3ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.104.197.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8300b339-34a8-4558-889a-9abd7ca230b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560203bf-3939-4393-b147-e1f91dd499e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dbf08c-3c95-45c3-bcd5-441d90d4f8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e19cdb-151b-48ca-901e-67fe702a1a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b422eb2f-5efa-4481-8614-b536e6e2b6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c301a2-5d1b-4e99-ab76-e37d7f63585b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5343e88a-0122-4af0-9acd-b65979b67493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9755fd2-83a9-4195-9e3a-5bca724a379c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6528edf-ddd1-4950-824e-67fda5fe61f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dec37a7-6aeb-4fcb-b940-3e394a99f5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82870d4c-1d5b-43ab-9861-5f5ca6a61ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82350fb2-a579-4720-87db-06fcb57ce2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a4f50c-ef15-422e-b049-df17d4e394e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa30b7d-d5c1-4532-813c-1dc9c59c3c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f52f636-bd15-4da2-98a4-44fbe686e950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247ad377-a78d-45eb-8b3e-a4498d057284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63860126-a57b-4c3f-822e-b27f554a33a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.162.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb8fbca-0023-4b7a-a4d8-978835421568", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.199.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13461d7-1c80-4d24-84ca-c89e42079fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.66.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afdcc46-b75a-4502-b63e-c9b1e0be5fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.15.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d3d787-65a1-4c0e-8e5f-c47dacec6417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b37e493-bee6-4b4c-b0a1-0e4166c5e12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.212.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5e3e1d-1726-4fff-a548-5854d614605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24764d4-75c8-4d64-9e5a-89486a4567b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.120.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4e7a6d-1234-4f8c-89df-846dfae90af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.88.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f48e92-3224-4b6f-ada7-6af5676f72cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5834bd-06e3-4095-802d-819590855d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4a857e-4b28-47ef-9097-96a9fc07f771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.165.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51271e0-7ff7-458d-b51d-e45396dfdcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.171.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334d6599-5b7a-4d54-af5e-73ec5348f5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d76389-a684-4a25-ab7a-e8dc8cf76e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f8a9b-02b7-4b11-89e5-77e28fe3b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b0240-940d-4743-8998-5eefca03d85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384cfbb8-2cd6-4cce-b123-ef1fb5ff5e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5d47b3-9ad3-4a7c-a2a5-8fbe98546797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b63dc25-a2db-44cf-8bff-932f80ecdebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a534e8-201e-4a8e-b050-af27703e6124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5bace2-f486-4c0b-b5f4-54301848c836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c83bd8-e985-40bb-b127-0cee2e30a663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225df8df-8775-4d6e-8ba4-0eb546c87d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3778a32c-951d-4ed1-b100-e8c169a36253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b05a20-f639-4693-82eb-50179382bae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e81fef-3806-49de-8647-01fa09dc874c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941f03cf-5624-434f-860b-e384620dfe97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7d182a-a7dd-4598-ab1e-5575518c64fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.145.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe084c-d9f7-4f82-8f7d-893f12a207fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31f7407-9b4c-46b8-8abc-4b3637774f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.217.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027604d6-5a65-427a-ac6e-9f5b704b1192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.225.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889cfcde-b7d8-4aea-b778-3c3fa382d7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f75e8f-bcf1-45a1-94a4-35092d43567e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c19379-f9b2-4e93-9c11-f7f560682c87", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.55.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1a0e9f-d671-44cc-95ad-e81dc0c82212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d763fc3c-cd63-4a35-8cc0-e7b71b207515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b106600-bfb3-4c3c-aed4-34cfc2d6d839", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cb6720-408e-4b2f-b5cf-53838017cbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7bc98d-0b82-4bf6-b6b3-cbc6550887d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f992c4-eeb5-41a7-a4c7-cf58070e1d10", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebb4147-83e4-47a0-9bfb-2a2aa5f61abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c79ffc42-3d26-4dec-97ba-d072676d1364", "relationship_type": "indicates", "source_ref": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "target_ref": "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68116b90-0acb-445b-a58e-d272a020f90b", "relationship_type": "indicates", "source_ref": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "target_ref": "attack-pattern--89f99014-2ff1-40ea-a2ac-cf67e4bbbf01", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a5f12b0-dc62-4aec-8c05-7f8eb40f1169", "relationship_type": "indicates", "source_ref": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "target_ref": "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfe1c949-e496-4c07-8c7f-f5b6bedb3726", "relationship_type": "indicates", "source_ref": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "target_ref": "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5374460-8c51-4f5b-a046-d9dbec52b8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa305d7-96fb-4ba0-8aef-16caab09d962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b191d8-9213-469e-8f4f-34b7015c296a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82130a81-4604-49b8-a049-9555e9ad0d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.97.124.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df24807f-7657-4b17-a06f-812a3976fdfa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.31.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef4a6f6-c7ee-496f-bf74-15f20cab5410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9205ffd-f0c5-47ac-a2fa-6ab896fd5c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78a8bf0-002f-4810-a6ef-7f02b804d74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdaffaf-927e-482f-836a-30ad7edefeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8422afc-14a8-493f-8b20-fe3f7cea8f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e18f866-65b0-4b17-8f89-ce3149286175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe277670-a087-4f76-a19a-2e52fbe28c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edb0e0e-a1b2-4c9a-9a30-690f6ddd65ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ce88f5-3939-4ba6-84fa-88bbe4bafc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084df862-a2b3-45ca-8d71-49fbd34e91ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc411ba-25bc-412f-b22f-85deaac3a022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf89e75c-4220-44f3-aa91-ac78720c8936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3e4f9f-dae9-4489-9686-76adda508905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d4cf0d-cd56-47f5-9e9b-4e336d64d917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc785970-8a8f-4d1e-84a7-96f0b707deef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d63163-419d-43ac-b5cd-799639cb7402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5509bd68-7d00-47fe-97ac-0605df2494da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e33b78c-5bd8-41bf-865e-da31cefab598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f84f40-1aad-4551-8f34-ba0a381d43b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de73409-56e9-406f-b19a-5f424df51b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8ff4db-b701-4cc8-8236-f6e166930196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161e6680-8682-4020-a340-e97941cb40b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902aeb96-ce52-4d9d-be30-7498925e304b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd566f95-13c5-43fb-9c5e-c2a081dab620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805e7436-7eea-4bc1-b85b-9a1b52c46323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b6ecb1-690d-421e-b101-c5f3b9142cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c48d4b-7e62-4ead-a2a5-9e011425c4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d6a5ae-9501-4b78-be3a-ea3a8586dc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401ac347-7bf4-49e6-b230-01324ab2c2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecbee61-ff97-4c9a-8a7a-e8c20bb7ba79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31d40e3-120f-45b8-994b-7cfa2f076ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e16e6da-539b-4332-8af7-eacda9eca4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbf6376-95fd-4de6-a725-c6e690e6eb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2247fb4-ce0c-4e66-b56c-46d35eda3be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eab8e24-9a33-48bb-b9d6-aefcfdd19b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67688662-8649-4b5d-ba3e-a49638f6e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7aed8e-b531-4656-8dac-59403e87dee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12728b0-c6f8-454b-9ece-0a84539e3ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003fc00d-a32b-4168-9dc7-aca47e52d030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2df8d4-d58a-4628-bb64-73036f6bb945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c394433c-59d2-4311-8fd4-082d885e2d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b19127-ea96-4626-9097-fb0a9968c9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59c7e1a-7153-4492-9944-9b0880abe271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd71882-8466-433b-841f-a82edc3c30e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4ceb81-5d70-44bd-a86f-d5a720214092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c59b14-0307-4c1a-9fae-267f8ef0e964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31bbc73-5b25-43cd-aba9-c91e5d0c8076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aebd35-cecb-4cb0-8b6b-ad06f742e966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0adc2-e56a-449c-bf6a-e2d624345c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fcf90a-6fae-4d20-a91e-335001907500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d1a5fe-d771-4f90-81f3-b3d62e9499b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6429224b-2579-47bc-813b-7a4a35f046b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8247ab-a8c6-48cb-8941-de96fe071fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb670036-c8ad-4be6-a10b-ab610bff9b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223a586a-aa37-43c7-b607-ea498a903221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53163b1d-0391-4082-9db5-83e385e2eaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de7f839-835f-4aa5-a065-10a180743d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f408437-5e18-4ffb-a855-25e0128800ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7705dca-a792-4d92-9900-a57043d9fe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2207b6cc-51d6-4546-be4c-e1ab0d2c612c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5346a29-4674-45ac-bbd9-156bcc7f63b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb446984-2ef6-4b05-97f5-52b059d325d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e220be-aaef-4b16-a2ce-2280d51fc3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12a09e3-9599-443a-ab20-e08be6661009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8706244-de0e-41ac-b40e-6f23ef24ae91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc886f0b-8611-4ad7-b073-5f46e260f14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423d919-29fe-4875-bea9-39a34fdd6907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee33c9b7-17dc-4929-af17-7d53c8c0c13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66035e9-730d-40e7-83f8-322d6af21ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75fd185-3042-4133-80d9-c690bdb46a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5d5729-f2c2-4898-a384-b7e1e2b5c338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f888af-0bac-4493-ac69-36ee739c0d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e57eea1-b99d-4d01-887a-26ed38f9746c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3a987e-32d5-4ebb-ac51-40f98a558c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a666a0a2-77bd-49d4-92fa-0597eab10bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373db4ca-3d2d-4b74-b909-716bcb6469a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530db25a-9d73-460b-9320-e1efaaf26cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4954123-9068-42b8-b094-3f9bebbe5109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c47560-3a50-4590-b4cf-84a467dce8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280069de-7926-4155-b5af-758957eb59a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84fe19e-da88-49d0-a3c7-212522d00a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c881f6-ff46-4c29-b145-ef53f28d3257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ec0509-b31d-44fc-b562-e0956149742a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b93e74c-f900-4e49-839e-2fb63d593218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a609e3-9933-4446-b175-9f76283815c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7b2cc4-9283-4a32-b684-bc33635853ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301d6a1b-862f-4be1-831b-75f3d7e74382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32fd31b-93c4-4e58-8c0d-762e39a4a688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7732d4-a000-49db-be45-ec7642fa144d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b441e6a5-ca74-4c6d-9b30-b65cd381b653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9ce760-41c3-4819-9a00-2790669c4618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c06f4fd-2433-407a-99fd-5cf45da087f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb2c05c-64da-4fe3-9f4e-50d3b03a44e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0344e387-5d8e-43b4-af27-b8520abbddd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9ad309-56de-4f03-aba8-bdbfa16483bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12a0560-baaf-47b1-82f5-e26dc5b46d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0226ecc4-014a-4635-a89e-a01d76506895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ccabce-107d-4848-bc5f-6dce353c9b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b221b12-c928-4c22-8828-539f05af6b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19b1288-53db-4c46-93a3-78cd8fcc20d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7446860f-f183-428f-b46c-59c30ad9c534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be895787-6a94-4165-963e-9e5ba49a8475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6fd5b1-8d71-448b-9a58-ac3f75683655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b47f64-6487-4127-91fb-71f4edaa6c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d1dee2-3ace-4b1f-af8d-622c8b223777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c915e7-0e93-49c0-b88e-a60495a5dc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b2d84d-0a0b-4971-9ea4-fb65cbbc06ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45348aa6-ca4c-40b2-8b02-aa10dc41e1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac861b3-0d6f-4531-9fa6-b89eeb6c8b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78255289-33b6-4548-9c18-e80ad68edef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f38d9e-2055-4eb4-a251-d728592681fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32069bde-fb82-4502-9543-324b9e751516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d72d32-a030-4c63-a638-f9435006892b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab0d2bb-c04f-4962-94a5-51cf21ae94a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613b483e-60d1-4ede-b204-e69bc40f3ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95d5d9a-4ce7-42c0-9ed1-dbaa283543e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a5cac1-3cb2-4751-b3ff-f2daa184842e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c81271-50ae-430e-b7c2-cbe56fd8c2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faccaa63-52c1-46bc-8e62-f1236c48cf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f80840-d0e3-4415-938b-9ffc685a1614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2705c3-0aa3-4fec-9e26-8cd99d12ae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd21ad9-3f6f-4194-a9ca-181c2f6dca5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b307210-9672-47ca-b828-7b6ac9df5e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd74d5fd-dd9e-4358-89f2-62e785197b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1457ae64-6df1-4e87-9cd4-a66d277088f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d52e8b8-c2f5-413e-a9e0-94688507ae53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f61b81-6ff6-431c-b1c9-303344ca5ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f475dc-3594-4dfd-9349-03399275369a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bf2701-0e2e-48b6-a10f-82f484cc3bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bd2cdb-d5d9-47e2-945f-23bfa6a65ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d0975a-3c74-4626-8a1b-ad625491cc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e75d97-c1b5-41ab-875e-8a434c9dcbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70eb764-c1d1-41fb-9d17-655b485ae2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf2094e-ef7b-46db-a5f9-e5d0e3e10435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f9b44f-8897-4770-9396-140b9017833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b01059d-ae36-431d-8a5c-4bed63d81539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de002fbc-ce08-4d62-bd4f-a0e6f2491869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a900234-0ec0-4de8-a0ba-cdc8bf972aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bab3f56-33be-416c-8285-b024f0d0d03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f694c830-e2bd-4aef-acd2-fc1b984840cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e47076-a637-4f79-b18e-e068d0eb944a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d792c3c-7602-40da-b9f4-2c0fefa1a9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27268cf6-8105-4e0f-bc9e-538678ca8af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f570db26-6827-47a1-ba2f-4ba3bc1ec1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa826ef3-743b-4d6b-968b-012341d46da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ef6f4c-09a0-4100-a08e-d1d8a8105200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5601ef1c-b79d-4ceb-9018-17edd68a323f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424cc21b-7b7c-4da1-a5d7-ad19197b6112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9809e7-3552-46d3-aee0-f3484631a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d4630b-a50a-4a62-8e5e-c4e66058bffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfd8188-1f3b-4b81-b7f1-c09a66eac3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34043fb1-a847-4b77-b517-15ffe9d4b1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08a5af6-082d-423b-8e5b-86a9e340dc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5e3d05-c71f-46a9-962f-3f3a8dcd6f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7140b37e-3a97-4e85-ba3d-ff25806a24bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d42abb1-7022-4f54-a015-c29998ca2321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143f7666-4fa9-4078-bb38-e52bd6ed2af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5777f9-871f-4a39-ba69-b1baffb87470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4981f16-6ab7-4fd8-a0f9-9dd48d75abe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c769e1f0-213c-4e78-8e6f-779fbe4a96fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daef4126-66aa-466c-b4d8-401377ef5bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465325d6-c86e-4ffe-a0b6-859c2105b391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281dbbdc-b7e4-43dd-a295-ae0cf585cd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1ecf9c-c6f5-4856-b12c-29fb3af89892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87121f01-a46c-43dd-9dc1-c9237efbe75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfdf915-7a38-4d26-8245-548b3126f28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c6cb3-b8bf-4d1b-8ebd-62bce6465ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a247a-0933-4cad-9cc8-50caf66f9772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6915f0-a826-4775-b539-4acafe30d462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dbb044-f9af-4954-8636-833a69a0d4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933aadcc-1bd7-423b-9b63-cc19393372a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cbd22b-5ee6-4ec0-8869-386178b3b996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd47409-86c4-483c-8422-1c376651b21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf9d5d8-1db1-469d-85d3-359661d9cdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a543e035-b733-4986-b0f4-cfada2f89d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855277c1-dc73-48f6-b653-1c99dafc5e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce72337-a536-4626-860c-e3d0747dd2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b13631-9818-4edb-88a0-d75d7aa2dfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706c679e-903b-4651-877d-c572e0caadc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94264675-e64a-43d8-9ac6-a694f0daeed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61528ed5-7b72-4a0e-b73e-960710546074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7801c8c3-c6b8-4ada-bc4f-f1a0957b001a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ada37b-c518-4ff1-9875-b749aec814bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c786e50e-be73-40ad-9b24-0bef677c0221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5e482f-aa2b-452a-ba80-cb2b33591aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4911ea99-a049-4359-9db2-bf95e10d9584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fe8131-5b32-4b27-9abd-0fde0a7cac5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215b9210-f944-418a-ad5e-3df20f06d98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea439df-b80b-4839-a574-d12a38ad07f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5065d6e-8644-4714-bece-699b26eb2365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe99c29-f240-4970-a605-84b02a421244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3dd661-e41b-4ed8-91dc-9b11c198d5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94d54b4-3ea7-4623-8b43-a69f114447f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12382c23-5989-4cca-a396-b5b51ef1dae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eba5df-330d-4c19-84a6-afbb80f6834b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6bcdb2-e11d-46cb-b440-65ca1b893f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d122849a-da12-45d4-bacd-f6c344a74eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac10ce8-8ed4-426b-894b-c38be604f784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007a1a1e-46c3-4cce-a69e-3e56accedf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf6f3b6-71d2-40d5-9a1a-925cd156dc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d73a9a-1b22-47bc-803e-4cbf269c52b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b9b0dd-9e7a-4b44-818f-e49eeaaba87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c624055-c688-4ae2-bc64-f6409c7a3b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896c0cd4-dcd8-493b-aa7f-02fc72fdf198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9448767e-2137-4b17-b840-b8f4a9833c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670a1ef4-30ca-46c0-a1a9-6583b36a048f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf789cf-abc6-4288-8d60-f6f45ce49dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f44ca5-24fb-4794-86f4-5e0afb5f655b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8d6e63-57cf-4591-8eda-d0259619eca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed098b3e-02fd-4a9f-8b71-44f1e2f0f442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f3a089-e7a9-4650-8ae9-10264fb66700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2be5ee5-12f5-4f96-a371-cb0ec9f60535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe00cea-fd09-479d-8e3f-2da59c61dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c92937-225a-4b1b-984a-eb64fbdf268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791b3792-8a45-4139-9e43-fc942260fc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c44ee1e-4452-4d4e-81ad-cda047cf4bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085849c7-8712-4d23-b6c7-a586d43bcb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9def40-8e8f-4858-87f3-b027badac546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48956686-9557-4aee-a84e-2d57959caaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a666f0f-529b-46d0-ba4f-ff1058f720f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dac82d-c7bb-4fa1-bcd5-a718b7bb65f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9c011d-e36c-4fc1-9e3e-9845b95e3e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77878472-3d15-426a-86d9-8e9870f30803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc451e25-c4ed-4390-ab76-0313ecbac397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec053630-63c7-45ab-bef0-b4893f29b6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddfe284-3446-445c-bd7c-ffa4f2f4ac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc4d221-dd8d-4633-8604-d329670ee2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c892a9-b06d-4934-8ba2-21788165247a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38b1a74-82e0-41f1-9c0e-baa82de0b160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f6f848-a22e-4eaa-8788-bcb8c8f8af58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbbb37b-39eb-49c1-9aea-38fa1f6663ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330ba3cf-bb86-4060-86e4-7a0b653b3b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3465f8f2-fb82-46e1-86ba-d83f113f087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a604a32-d83b-4977-bff3-c016fd352d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d1b4fc-0bac-4092-9373-7df3d7c9e0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c41659-5003-4dc4-ae6d-4b1ad8667610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468dfa83-76b6-4376-8565-8548fa66f855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209bbdec-a0c6-4025-bde2-68d0784da7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3559408c-8e82-498b-8d05-29f708d98b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e41102-fec9-45cf-a537-566d05cc2110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6113ad2-ec94-4040-af0d-74228a5dc3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adc7797-8ee2-40df-9d2a-18564336ad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42667b25-2781-486b-b9f3-2a47c9f2535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325d814a-4c93-4c12-adaa-40fe207f2e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83986f22-b166-4a4e-8747-a9f214c2f319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452b1bbe-13de-4f16-aba3-c3b5221133b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e553a02a-90f1-43a3-a612-7e631bbd215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c087b29-3179-49b5-96e3-b4544a62af0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890b27c1-4831-41a2-88b9-9da074e2f669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb13a23-3ffe-4fe1-87d9-3db16f1e25db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad212aa0-f227-4cce-8a5c-55059acab60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e6a413-6ddd-4474-9a00-27d31db3c243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223ba42d-7806-4102-ac3c-e5703f023645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5534ca3b-7bb7-42dc-a1fc-41fb67c31ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.208.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059f439a-dee3-409a-9530-aafb363ee672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd71562-e816-464c-96df-9ebd8d50145a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa434dbb-2b51-4565-8d76-4d77a79a67a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f810ea-67fe-49b6-8dd1-c54c2f2b14f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d472c85-9924-4a6f-ab4f-574a3e503d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e45c3b-5839-4700-8724-dd0556cae64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8875af1c-2110-455b-a2c3-2ab7593c533a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cb109d-df94-4366-ba74-9e59043a1a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69e5e17-4d7c-489d-aab5-a05857553753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d786873-a3ef-4d14-b662-24aa226ba989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86657e7a-3742-4601-b26a-53c85599df2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ec1280-f632-4dc8-9ba0-2f355e63ae6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe46f0a-a9ae-42b0-a74e-efaf94553710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4333409-c13d-44e6-8e10-0147dc7726ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3aa3a3-49de-4f21-ac25-a8999fb05dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7373b090-3be2-47d6-b513-a6b0ed14161a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cdb17b-024c-4196-ae4d-37aa71b8b14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9911bdbb-6bff-4ac5-b28e-f13315af575a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8038e69-97d7-485d-b8d2-4af58119bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b275034-86a4-4628-af22-257a587e6202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2e7c4f-e5f9-4833-94e5-1d48fbd71338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b55da9-f844-4a1a-a54d-427fb1537414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c113f5f0-a7a5-4dbf-a5ca-fa8d12a654f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e37bf60-3d9b-4f44-ac7b-4d8e69c250d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95474412-cae8-4929-86b9-e218fcee06da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e23c8e1-2bed-4d60-8534-37725508b00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3c9448-a84d-4d55-8025-8dceb1d7c934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23491f1-89ae-4ea7-a547-bf4860f3852d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62aa172-1c39-4b48-ace8-67ad024a87a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df65c9d-8eb8-4bb6-a390-693e9825a57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755c6cd8-781c-42ac-bfca-d7c4cab24dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22688c0-4e96-4087-9b1e-90640f4f2eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1ce274-b91c-4440-a72c-8d18a00242e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ea5e90-e53a-463d-835e-4130a728b07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a61924-18f6-424f-86ed-89fcc22208e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e360e25b-b4b6-4fdf-9d24-3af9028fdc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7b95da-264d-4fda-9735-d7e5cc881a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020f901c-ea99-43ab-b21c-869a8b7ab318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd227d0-c0b7-45ba-8c17-0a80156d8955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d6bc05-78b1-445d-99e9-d90910129bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a597d8-a4e5-4670-8005-e16ffc1a38d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013ce218-a2fc-48a3-81b0-3aa957664276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddec0257-0ccc-4b8d-90c5-e82ec8128e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f9a614-c92d-41bf-87f1-51180e0cd142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba9f338-0f89-4434-8297-f9e14b9b6a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca421af-1abe-4dca-9a3b-12d87d1b52de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0727915-f1fd-467b-8198-d8867eb1043d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc6e379-368b-4156-ac8f-dd5834a045c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a4dc6f-2b90-471b-8c41-cf62a0c9b971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e01cb28-e394-4e71-8752-b00941ceb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcbe63a-0ad9-4bbf-93ed-25cd8e918ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daee0db-eaf2-4320-bd3f-bf6824912caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2186e981-09ce-426c-a9f8-87ac76b720d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb0f45a-d7ac-4a9c-85bb-414ed98c6b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfd7d46-63ea-4e28-ab55-a9030aa8b2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb04909-aee0-4e7f-9ae7-c7739c48e536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952a4dcb-0aee-4324-9ef0-569034f07add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25be0e54-d57e-46fd-92d6-fb345baa365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e95a7f-f44f-49fe-9a66-f033c1cd1f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb6d454-e97b-4c98-ac2d-d093f8216cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7be585-9bbd-4d70-b0d3-7b55434fdc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef49a60d-3272-472f-abb3-2b9f425eeca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fb9a8e-d529-4bd9-a023-763f3f45ab8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08728a50-118d-4e84-abc0-8f6da08e414a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed2eecb-d18a-4623-98ee-a78e6fa3731b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce406e6-99fa-4407-9427-57c928aae043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a18a9-fde1-414b-b5c4-6f4819b818b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d970a6da-98aa-4752-87f6-08ad6e279eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4d323a-384c-4489-ba8c-68246f64238a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c54cbbc-7c59-4830-b037-b9611fbb230e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e465510-6a3a-4428-9aa4-eeae5c35d46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e9d826-2c09-4935-b348-55c92230714d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac77fa2d-7f3f-4826-9da6-018de1e2b32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38350695-9683-4e93-b780-447022311b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa0f974-2c11-43c7-a374-d7adb81abcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9968c3-1d43-4572-808f-b76c3c2f255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8a772e-f586-4079-93f5-0fb75bfa3718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53051e3-eadf-495c-ac1e-ae4e89971285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49960309-53db-4fe6-9657-863fad49031f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31efaed7-ff27-4689-9a1a-f5d55f0e92f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffa5a48-19e6-4b10-9a1a-df88c6bc51cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2014dd2c-7698-476d-ade9-4ad19f82b5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fe5505-346c-4751-9007-5a4e7e42b091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b713d3-2bc5-4e75-84ba-9bbbbd97c9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25624d71-c0a0-4e2e-a422-d8f22c80d634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0dfc7e-4a0a-41ec-855a-60a62b5c3bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8180fac1-8b1b-4fab-9122-0e29b3ea94f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c57cde5-fb70-4340-9755-55df62f2709a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2794500-c2ec-4254-a026-e33c23242d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398d3a1b-dbe7-41d6-9e7e-cf4e7a622ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bc1c03-8d2f-4b25-9971-c9ba0d3222a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7598c1-9cc6-4c2d-b067-85fb268ecfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8138f19-4d30-414b-af17-bd5ee32d3301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f86103-8cf7-4a7a-95c8-928a517c7aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e29174e-bbcb-4a0d-a6ef-08a2244ba45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961ae51b-d612-440a-a441-2305739a89e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a292ce64-d565-4749-87c9-fb710c9735c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c05739-e314-4bb1-ac90-a8577ad38dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894d947a-15b7-4fe2-90a5-5f89d400f99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e6a681-8e0b-4200-892d-21b7952bc7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0a27af-a31b-4bf0-b4ad-c106db8df876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9c2f19-b91c-44ea-9767-5556c4577391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c8e65a-5ece-4375-b630-25b4e99e49b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e87f528-9ef1-49e4-be81-2720ebf3b777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f891f37-89a0-4796-880f-f4255872817e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc24444-20c9-4ada-9c08-d3b2fd93c431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45586c2d-d42f-40ce-9c26-1b86a78cc3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49776df-fa94-4f51-921c-3cd5eaadc20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9730f-7435-4e70-8dfc-709b457215e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa46a43-f1d3-42f4-bc9e-ab5838eff353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63232eed-3cc9-4f32-84b3-4ed98cb8766c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc55f6-0ff7-4606-9a38-258cebd8e141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397dae78-4bf0-4682-b1ad-9f300d13a971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16806227-3e23-45c8-92d8-3eedc3fc7a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a09a4a3-490d-4688-9d28-7168e676c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28717260-2e5a-4786-b9de-6f68024e670f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4256befe-8b3d-4534-ada9-4c259570c1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b492403-f366-44c5-ae22-fce306ae3d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4f43e4-7887-499b-a680-7aad16fe4258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76782a39-d94a-405d-92d2-2c223a6992e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eb060a-ea94-4830-9830-172d1ecffb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c51dce-5898-4378-8966-7fc26250a7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d591d1-108f-49eb-944d-a25f177e595c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc8b5fb-4590-49e2-8aea-a51c9474107b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4de013-10e1-4216-bd6b-1c9d2c761652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d619369-7780-46f8-9959-a1d5ee20ef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4c92f2-8940-4b5d-b49f-c1204fa6a6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425914e-da17-463b-adf4-476b19b86b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7666ff-532a-44fc-bf96-16f1a2699a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5f6cb6-e17c-4a03-8b8e-4f001d4df2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd88e16-0a60-40b7-90fe-5b846af1f78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49296161-eeae-40b0-a46c-de37f3d03f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bc9ae6-26a1-4335-aa25-bf04b7e2dbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca2f2cc-ee61-44db-8669-388aea1714a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b95b5fa-1b2a-4803-be62-26901431379f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986a1989-502f-4b08-9335-f2ea38eb0678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8873ad5e-c794-407b-a5f9-dad9902a7c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a290b-34e1-4d49-9741-6a45fc673daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d41063-aa9a-4513-b49b-e48bd966f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237ed1d3-8e8d-4516-be1a-58703452fc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c7bd7-2e5c-49b0-9117-d35107fd746d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d887ec-3aed-45a6-bec3-d83fcf2b4d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c61103-59fc-43a7-9fdd-daeb22417e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50b46f4-98a0-4fb6-9b47-79b72a24a16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d547c927-898a-4fa1-b853-9ea0c85213ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e99cc8b-f9c4-4824-8396-31394378ee2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c0b669-54ca-4904-a3de-d9b76bd0059b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c082b5-0392-4cf8-bf34-a0a1f3ce0f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249107e2-3263-41bc-b401-f3ea73db6f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab783c8-7888-4d6b-8b4e-0eccfc4fb235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03da2076-39e8-49ad-91de-0cb4ab5c8856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b5089c-ed94-4181-8b6c-6e2e0deb0861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03895a2f-1996-406a-ae77-4228859862b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78954a94-f2fa-4213-8fbe-e3301a848109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500b31a4-6e72-4c6e-a79a-cf8f75a50654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea94960c-7d0e-40d0-9f3e-94c469602945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f183073-a150-47a8-b45b-6b68233ccafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39526ad5-fb0e-49f2-9c74-4032d04f81e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d61684d-5759-487b-9873-13bb37f67294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe50f00-a0b9-4e28-bb2a-bcd24bff8321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38587249-835e-4c41-85b6-66aa3c563dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d1c5a1-8945-4b74-89e3-ca8a89d90f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b3673a-01eb-4c1b-9659-79bd7bcfdac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f0203a-7964-4d0d-b6c3-13fc256a3674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508927ef-774f-483a-a1a4-10a33e37b403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa40c27-9277-4922-8c01-91c33dc17cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed4ca35-ef04-49fd-853b-a26332ad3555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bccbe6-bd5c-4023-88a0-653ef7f4baac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a09d59-dabc-434e-a157-ca8e52f98b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00aa5a60-7d61-45a4-8bbf-e51e525a2e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fda904-8e07-4acf-991a-7e8fa32775a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0825719e-d823-4de4-a410-ddc1e5665c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832b8a8a-b283-49c5-85d7-e1988c3f8c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1868a4c-7d4d-4960-ac30-79830e9ae003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef41b9b-b167-4182-8081-8b01365983c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6447898d-a596-47d4-9efe-549567c99236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227eaf39-83f8-4b52-95d8-266ea10de50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6f2d1d-65f3-4ad1-8d36-efbd9d11427f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f09b0fc-4166-4410-b2e8-89a820c82e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec27216-be39-43cd-a04b-cb51bfa5e47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349398da-78c5-4f83-a9fa-66081a709efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca8aeac-ac7c-446c-be24-b50df34dbc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2defbc-bb98-471b-8f44-012d5b0fb59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce550d5e-17a8-4303-9258-0562b20625f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815338b8-fdc5-4b35-99cb-fa2432cfbfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06056108-8ab4-4fff-8b27-5356e79cb0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6031f4b2-50a6-46cb-a07b-7ed65a8eeea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b4f1aa-283c-4ea9-93ef-38fe6c46a996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a77006e-26b2-4fa3-8c5c-97756af51a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b61f5a-26db-4049-abfe-40954f440261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff71c07-5f93-447c-994d-4a95ee3fd87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de8b037-b82f-42b4-8c76-e42836725efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a718c130-fd03-4a08-bfab-f296a1595ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e6455a-716e-43f9-84b0-f8f766cf3b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88139977-895e-445f-bea0-871c82a87a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96315655-a703-40e5-9ca0-f9337623abed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520181e9-645a-4765-be08-1781d1be914f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f600375c-97ce-4fb9-8fc3-78b015a1b8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b46862-700d-4bd3-a8fe-572c5d8ecee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e69bcc-f2e3-4fb9-9364-08e6d7fc12d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1697d245-e4f7-4b24-a253-6efde028996e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337b7bad-e359-496d-8e44-ef63796df82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735ce1c7-52e7-4375-af5f-e05c97c531b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b9efa8-4154-4946-818e-315823a790a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed3859c-a7ef-452a-9592-c92eddc172f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2e5480-ad9c-4204-aa5c-6ae929b9ce41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb8533c-0623-4fb8-97f8-13fac87cc3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6de35f-9b69-4340-93a4-e389033dce9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42759fca-01b4-40a2-a498-cce30bb9a59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b894e67f-27bd-4094-9aa9-7f7623221f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e706216-b1e1-49d8-8b37-7076aacfdd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e34d45-4f83-49a4-9ffa-01dde3c1c0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1785be98-f0ba-4ac7-838e-595584123f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96570381-a282-4617-98e2-8bc11b80f3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24cc307-a286-4e9a-9a4d-fca04ecba185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7858a68a-4b8c-4039-81ac-401628455ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edbe432-d87c-49b8-bb33-fe4f6d5aa841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db42ed17-8bb9-40b8-9e64-7916b3770b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70535bc-2868-4b3c-99c6-c8d861a6288a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b75287-f16f-485d-b743-f8fd84a745c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46238296-956f-4db5-9e1e-7777f291bbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61c08f4-a320-47c8-8b8b-68c67daa84b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26afec38-adbd-41f2-8196-2d4a378d8a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2933653-575d-45ba-b100-7c794fa10533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d24c1-fe06-4c2a-b8ce-5c3c13ff41cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ca365d-4eaf-4c59-a30a-fcb0fbc94e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abdeaf7-dfa7-41db-af7a-df6046c8eaff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6891c0d7-f31b-4fb0-9f79-cf4b0f674676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd505f5-bfc6-4b60-9df6-cf91b9ac0efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe0523f-4d4a-48b9-8154-a5f31e87c33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.209.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b71765-9c1b-4caa-aaf9-4715b0be98d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2335d91e-1a37-4190-9141-91c91e3f524a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd03910-a21c-4def-8631-d54d1d23b4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f0dbd8-f3b6-44d8-b905-d27b4d5708c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7dafce-9070-40e4-bb82-f27da1b4f345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96b5539-4065-48ae-ac86-36e8fdff268f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8338276a-2aae-4ff0-98ca-ee2615a01389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355cfea6-221a-4c11-ab0e-32b85d97f39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641e66cb-2621-454c-86f4-b8501b229964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29312c1-9cec-4ba5-8886-ce62f6232ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194c4812-b992-4134-8b64-f12557d0556f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7af45b-aa53-4f9c-ac47-e98d3ddea9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54223741-2da2-4eef-b2f2-30fd74b2d2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b9cc83-e055-4114-a247-73982a6c07c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446f6d10-d1ba-4886-b2dc-7ae077fc1d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35a54f0-6fd5-45ec-bb1c-2d49c64e9c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd846e4-353c-4ddc-b484-0698ef40fa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6494d970-62f3-4141-82f2-01b8ec05af7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee7951d-3ff0-43e1-b099-544d97b66ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.116']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc90c144-f22a-413e-b60c-1aa6f517c29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dbc3e0-eccc-4c26-b05b-8444bbeed06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a87a16-ab0f-483e-94a3-29b7b71487bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cda7e0-c1de-4824-a022-4f571076b926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48067613-8424-4bfb-bf3e-2c10624ae6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f74a74-c53f-4e15-b4bb-b9019e5b7637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac345c5-2ccd-40e1-afcf-11984e18950d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835a08f3-1680-4f11-80bd-363dc8db4442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66253745-ffe9-42b6-a9e6-4ff4dd2b8c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d43310-10af-4ca9-8d65-5dd9e8c5f27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfa6f2e-894a-4915-be68-a9f1608d00c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a04d421-b62e-4f02-9acf-df80cbf4943a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd315b0d-b9f9-44de-9798-8b19eabff49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4793bd-5cc8-46ca-b566-8a50cb2ea254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bcb537-cb01-4425-bf9e-6848792f58b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85a3e1d-d8a4-4458-b0e4-f925ecb5999e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8491f311-c290-4255-874c-b6cdfc3156b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666fcbfe-270d-4196-9c3c-2d83b77e345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7991d9bb-fc45-478f-85e8-0558a5a53c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc53c12-d41e-4235-b38e-cdcf5a622179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d7ba10-bd2d-4ede-8d00-a499b4027a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b89540-9012-460d-bbec-916222bc9138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9130e98-781d-431b-ba3f-9bd87021513e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f859fa-c6af-4108-ad48-ce239a3d4318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9569c68-6b63-4a1c-ae55-14e0d76b96e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bfb478-3f40-42bb-adc9-2ac13c7b93e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81382a-bfd5-4cf7-a7c5-32d1204e8d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3699c96-30e0-4781-baa1-77ef8395c48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31cc814-0bec-4e5a-a02c-ba67f14a7a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fc6434-5a77-4940-be03-1c17e2e58587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a1f8b8-dc57-428a-a46a-994dbf4656f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9022dbab-e3e2-4880-bc74-48497e52fc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8553ab51-a095-4da2-a824-9f76b69127ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ebfdb8-1a15-4c8f-b59d-3f117ec19b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695dd062-83db-43fc-b16b-9df121d977f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6986d734-dc3a-402b-a455-fa333b4611d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb73e46c-b953-434f-8e1e-1aa6e2e1d533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302fba32-44b3-4b07-a5b1-d5dadf8b51ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c373d30-f0ed-48ef-b2cd-00f0050e6961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9bec33-4140-449e-9002-8c453d0f9af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb3c41-ec91-42dc-baab-9e0ed8ab5dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e630fdf-d530-4549-9746-b8db411f796e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dd49e4-2cdb-4195-81ba-cc040d226907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af48db7f-902e-4515-af76-dbad51bc9ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab10a503-2928-4707-96d6-46b4592728f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a118c9-eaa8-4b9c-8e19-7224395250a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9548d0-9d79-41f2-bfc8-542e16f8f253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e7d62a-a382-4c9b-a7b8-a789d79ef286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b60ac88-7e2a-4dc8-990b-d65797b795a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c695a2-c416-48e9-b537-38814de814c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91e8618-032a-45ea-88aa-3ea8637aeacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5073e167-d7af-41d7-a506-5475e30353fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9d43ba-f92f-483f-8b81-f73e1d1c4b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f874fa1-ca95-4bc0-a746-4fb910f223e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ceac2d-8fae-43b5-ab74-67ed91fe18f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b3acee-6e9f-4122-a0fc-c67bd468ccb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec3417b-04bf-4879-ba87-3ca6efef4f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd621dde-4b04-4538-8475-1792a5045d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4c326c-9053-4f42-8465-999523c9a295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1f0af0-38d2-43e8-a76d-8d0688aea3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714cda09-badd-4eb2-870a-923c2c926fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac7af76-81fd-492a-a559-f9e411cc7503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943822f5-6e80-446e-8890-6d06503414f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dc8dea-ff38-4f36-930d-e2c3fec0338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8a8ab7-c541-42a2-a59d-e4ec6059bc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3d3bbf-2dca-4d38-acbd-a0c155ef5345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0da9567-279b-429e-a3c8-3bad467d4736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912246d7-d878-4e65-b836-39434595142a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd5c049-7984-4c8d-86ba-787d8acb3ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4c4c86-ebbc-4c26-8dbb-0d4ae7cd461f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a97602-11cd-4e19-ba59-b390dbc05e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b7b5d3-c239-41cb-a453-7ed0f1202063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1abd90-7963-4b25-a30c-245ccf139efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a65990c-cb50-435a-97fd-eefe08cbe788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e8cecb-9e02-44a3-a5ef-04fbb38765c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3fd7dd-50a2-4f23-a998-3c94b7749fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bd97bc-ec22-4c0b-bc77-a750cdf04005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bee5069-66b2-4e63-8c7f-480010f9bc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2933bb89-84ed-43f4-a245-c11a8e95cc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd6225f-42b7-4bd8-8edc-ff106e0833b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115fa984-732e-478b-ae1b-c023c1b0dd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c493a4b-244d-41bb-a72f-90cef3514cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dc886a-7f0d-49e5-9009-781ac1f04a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1328d8c-9d7d-4099-a5b5-e60d530b639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f289f092-f5e8-41a0-b243-2469034acfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe5bcf8-1d54-4a7e-9bc3-d7f7e19bd357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc67a9f-de1c-4e4f-b7ae-85509136454e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56078c0-1059-49fb-956c-cf53283e0521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbebb403-5dc1-4e7a-81a1-ac484d894987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4ff465-535d-49b7-b601-c999c5df9caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3962d42a-481a-4a9b-8b86-a35b6be87298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772c4bd1-abe0-4de4-b388-228be6d91741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d581ce69-b2ec-418d-9ddb-9ac16a3478d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35cf13a-2ece-470b-ab6c-29e02b88e28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fee0c4-3eef-464d-aac5-227790a27e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81028f6-6e8e-41f1-be16-387d7444fa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1051b66d-cfce-49a1-bbf8-f70e2b9a9167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcacf40-14d7-4419-a1e0-6bd45d0c50a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced1301e-ccb1-4cab-973b-1c747165d949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbb2485-b200-4dc5-8640-31a0b7a29d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f8c85f-7105-4eb6-87de-c1f14f2ee044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca85e0a1-f5cd-455d-8147-4253858d9b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fa69da-b516-486a-a395-1c76343230d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdcc8b0-ea3e-4679-9a05-2c34e38f1cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8143bf-052f-4503-bf98-6afd5727991f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b98bc0-83de-4fa4-be8d-4848d6a47549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5124f6-9b51-409c-866a-d78bd359e6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa48c01-74a7-4fc2-b019-2f82ef829cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dbe873-f73d-4fff-9d51-195999ffc854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26c4e1b-a39e-4d5d-828e-dd0d9c576a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec182ee-369f-4f4e-b880-91fd00ad1ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2bdbb8-46a1-46ca-925f-123c3f3417c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f070d47b-f931-4fcd-a6c6-d2d2d230b1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a3c0be-7ade-40ba-a43f-e549144737f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312eae8a-c223-414f-91a1-15d6ee28f15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe67dbd-775f-423d-b040-b14589de0dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc36a9d-507f-4b1d-bea2-2069bffd8ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681e94ae-2255-433d-955f-24e213c7e6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c0b973-b50e-4963-b5ff-ca24ee7a351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fef5c5-ff2b-4fd0-9394-37496b39f2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da64f65e-2340-4379-a31f-056a9d25e2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c10fbc3-7a35-4b50-b9d6-ac1beacedf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77a8e64-65bc-40a3-8ba8-de349ccb7cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eff9fb-77f4-45fa-afff-30f1d8dae519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff6dc20-40da-4105-8ce2-1c4eb5add0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4edb2b-4a6a-4b95-8fab-9ca5d06ad1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fdb985-7958-4d07-84a3-6fcdb35cf8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de4a0c6-7db0-4192-8e7d-23b83ae4f21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab146d6-802e-48fd-8b73-ef8763affb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c30794-ce4a-432b-819c-11c9d4a558c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fab036-75c0-4135-b9bc-62b130f22f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6f76a8-d9a3-4c3c-9650-a02267011955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefc8423-9f82-49bb-bd87-780cc6b4b6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab1ab4c-e983-49d8-8010-c94d2f7eb05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa860e95-e57d-487d-9ca2-e2eb7395b751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ca299a-c5ca-4230-8eca-e6966b0dcca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51776d1a-91b6-4b5d-9955-19bd72cf3f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c179f307-260b-4140-ae1f-b1830630e5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78bcd09-875a-40b8-8fb8-1cfee220c9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1a0dcf-ce96-4148-af18-12d9b0b4fbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982d9276-de3e-405a-971e-fcf97e67bc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e72d7c6-4386-45a5-981f-69ba852a3451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aad18b8-3bfb-4da5-b67b-f9b5028059ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a60821-a96a-4c37-be47-787ecbddd3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a16a1b-0878-44ea-9b9e-61ea04a89a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d419d83d-273e-4f2b-a5f0-d7ea14730f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a21b9f1-5a3b-43bb-bf7b-8fbb1862b7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4abdd61-5e6a-4147-808e-de0d669aeeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4c0f2a-e6f8-4af2-a770-6ff15e876633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e57c4d-fca8-41fb-8742-900d813a983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a55b0e6-a81e-4b11-a366-b9b63a02a87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4e69e9-36a9-4c3e-b7b6-b8558b6989b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b6138a-6d7b-4f31-9d64-e7849a607e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005621e4-a362-486b-9fc1-b780e3af33d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d231527f-adff-41cf-974c-0e0153c1e539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78955f44-33c8-4ae3-b903-a6f5a2be5778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d0030-8881-4666-b5fb-209f9dd7ed88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ca4132-9991-44b8-b32a-0b0e78f562aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527e423a-33dc-4884-b5af-f86b4a7e3703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d1a3b5-3ece-4a0f-8a15-bd76da97f827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e3848-4839-40d6-860a-8f7080010323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99bf0f7-c14f-4644-9676-f898c5c8b338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0440e4ec-0384-4794-888d-b38211d4f44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6113a6-bdc9-48e9-b415-4276c9ff1885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a6ea08-8ead-4462-8216-1b58d83173c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff4c3b9-2a61-4da0-8016-e363d10f5061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bfd3c6-00b5-42ff-bfb5-0d69fc6b04c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fe3350-650b-407c-a7e8-3d647d2a16ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb9760-40b6-4306-8dae-979ef6dbfe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979fcfbe-32c2-4ced-bc6f-3c6aef7070b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9077e5e4-4b51-42db-8b9b-5d76f7dc7aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d2a78-2ffc-43af-9983-f9940455a124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8076c613-3938-45ce-982f-24b3ed40e284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2cf0b0-09db-470b-8ad6-643039141ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee09aed3-2d6c-4d62-b674-d80c3893e4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e429528-36b0-48d8-a1ec-235dd1b19b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4326ff55-e8a4-40eb-bf35-2735011d8aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd0146c-628a-45aa-8cba-5f1989a53a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970d3ed5-3711-43af-b211-1879ee6a419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13439bd-a2da-489c-8761-40fdf0521e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2712e681-fd60-43ac-9be8-dfd6e8cd7c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3f1a05-4602-4d64-ae23-318500d556c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df57680f-31b2-4203-805e-f524d7ac2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891a2d5-6ee5-4c16-9635-27fcce9cad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ee80fe-d2b6-4946-93d7-70c86a4a63fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd79092-9a24-4c03-b842-cb33f5ec5286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5479c145-e4df-41ec-80e5-97f5758c1783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb41bf3-e6c9-48cc-9f51-25afadd9eaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90c12e0-a67e-4c8d-b111-bed0858b4ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181c6538-bda4-4e41-bcbb-37bd2f91f19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b69b5-4eef-4374-8867-3cd5d8d8b988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da38a66d-3d92-4bf4-8d7f-160415b7b289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba94e5c-234c-4066-a87d-4bc94ce63675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2512bccc-684c-4337-85d8-c297d38d1192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36109f04-1355-4773-a82a-1d9fb6ce8fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b98bb21-dfe1-49a4-a60e-b7c6a94f2e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23801f5-aa0b-44df-9783-c8b06377c036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7044dd88-bcec-41ca-a855-49581416f47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aca66e-6434-45ce-aa75-97d5ea8261ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bc1242-89c8-4730-95a2-d24f07cf43bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f68e88c-619f-4c99-a025-bc65a0eb6d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d93fdb8-7767-4369-a8d0-d371e49a16e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c517ff1-6b5c-4dca-ba7a-d5f87c396fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb79d9e-a423-46cc-86c4-f7710944e5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d65a56-8218-40cc-b237-9c891f21d0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27af559a-8e46-46bb-8945-92c5fa254360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7169299-3b53-467d-a2ab-f067214605eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b43528d-0c38-40ec-be65-18b3471e1a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3be0721-ea94-4ca9-855c-cdb7b7b63418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1fde2c-3669-443d-9873-c1cdcc7deaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.210.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0eed7c-2a4e-44da-b903-c3e7fc564641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac953d1-3928-46f5-b203-105651b20c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fd86be-038a-4210-b089-bf678a84337f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a07717d-cb8d-475b-a47f-b68d9d85a765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaa29f5-5b85-4049-8f0b-99a91c06d39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4431cc35-78dd-46c4-8547-975eb70034ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1798db28-7629-4f64-a814-c44c2a4937c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08559f8-6443-4fa4-b226-273075b7b172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d32fcd8-78ef-4c0c-b12e-c8586a8357e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6a4948-2f67-4688-8723-714f3221728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e972f2b5-e00c-4a50-92f2-a8edae1ad595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e73bb00-40b5-44ab-a99b-1e78c3536d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf15a05-c585-4225-9394-5022ba75b843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac59d02-0468-4e7e-a34a-015eaeee7da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5648c7a9-3bb7-4a5f-882b-80ea8bc1378f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5504a14f-daab-43af-9190-da55a6ad889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300097c6-5996-4813-988f-8ad638680618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca11ad29-db10-4c29-8337-8056775ab925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5254ea8-e24c-4acd-98c0-93a01cfa0ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ad5c09-630d-4967-ac40-6d2f0a4d21ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf69cae-15a8-4f54-bf9c-2e7ce7786ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69afd2df-ac9a-4fdb-b10f-0c1f77a805f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2656686-e33b-4c7c-b25c-f49e7aa254cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e248310f-f674-4a24-bb03-4fc87528f908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496bc7f0-14d8-48a2-8fe7-1873c86ce55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5d71ef-1d79-45bf-ad15-59305f2e8eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a98869-31a0-496a-b45e-7d747ffb200a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.123']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1edd466-e1f8-43d4-b123-5cdf9d44bc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5d944b-b825-4d3d-9a98-d869b5b9cfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3f16a-224f-4059-b8ee-66ae8f9feb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef37f71-10fe-4499-a13f-1aac6f9435cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921081e6-f3eb-4645-9099-c3838b3293c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450225a7-5b15-48a9-bd4c-9d4c491177da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf4d985-5040-42c3-bfde-ac56a3832245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bd10a3-cd38-403c-bd21-b4f63ba0aa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3506e6-e27a-4d34-b8f9-1174058494f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744c6cff-4430-4416-b9e4-a36c9a9acc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe8e4d9-90e4-40fb-8b0c-6d71a774ce55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce13511-338a-4b0e-96b6-3e3835a0db55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87741c53-9e91-4bcf-8ff0-90f7e98e5e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bd077e-5e63-4d67-8d69-4dff4a20c127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a482d033-8211-4220-8b90-4066cb1ba20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2992ad9f-1288-49a4-b087-78330c25269e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40870b0f-c635-432f-8747-aa742de2252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447a7613-f5c2-4b65-b153-9313da449bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec9e69c-1066-4925-b54b-56ae2c51c165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8c05c9-58f8-453d-ade5-23772df23af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b350a66d-c68e-49ad-8835-c03f17d9258b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab17cf4-3752-4842-a19e-ddfa912e8f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a447f12a-33ed-4c27-a05f-1ce6bba61f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ddff5-1dc7-4af3-928a-1be5312514c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452f8aa4-e455-4e58-b84c-18da9fd319c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ec926f-1802-4b8f-8d7e-4ca1452d3821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a124b0d2-d85c-414b-b984-4853485c0be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376a773d-f446-4ed1-8c68-ddffea68d424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8def8fe-adf6-43b9-891e-b677a9298f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70c3504-7677-4f2d-9348-3efaaa73a4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7032d7-fbec-476e-8a92-8dd99a6f373a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.156']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa4b131-72ec-4b08-bab4-b937c3e2feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3acf8d-4080-4500-a58f-f91f2c9c41c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debadb7e-15e4-4d0c-8387-d6f3bd830253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1151b66d-64c2-439f-8311-674dd31684f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c20d865-44c2-442a-b07a-a2713ab5a93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0834e3-c509-417d-b5c0-eb7600c18b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f485b58a-81af-4fa8-ac6f-49f00492fd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddf9c51-7e8c-4319-9a2e-bc239cc1d4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5099d81-f8d9-4898-91a7-f793ac790dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d79c85f-debd-4445-94fb-a50e71b0904b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da9c73f-afe5-4595-9097-1941fae3dad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8f0368-e98e-4256-8588-ec78d04ac913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910830bd-6c22-425c-a8f5-b3feda43c6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ffd45e-4c49-4f8a-b4e4-b9eb9befc447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7391a5dd-4ef5-4d56-b052-8e15d878eb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f441385c-9250-492b-a1ac-3da999339387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7730308a-b851-45cb-a692-35dcd64cc452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d41247-7f8d-4aac-aa58-8fa31ab12255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25967986-c06e-4dc8-a5ed-0409a162fd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc11a35-b507-43ef-b44f-053c3dc38661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4269a439-adbe-46f1-b348-8140ffbfbe0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860fd03f-aa83-490f-ad75-38256113fbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29525041-a2f0-4ba7-9785-b3b4bee9b58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bf52ff-5ea4-440f-ac2d-1d5b5a8ee5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24104ef1-7ddb-4044-9962-ea2bd712ef45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152b239e-30ef-4b04-ad18-9bc987db4846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91847284-b729-48ed-86c3-a5a7d90ee0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb432485-77d8-47a9-b43c-8de7bd181593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326113ec-9534-4101-bff2-abfb4568e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49452b5d-8cdd-4489-a4e4-1c3a1dc7c1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b5633f-dca6-4f59-a925-50121448af4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c23a7ba-070e-4da7-946f-dc14f7cb0b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57c618c-77da-4949-a449-9067572e108f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59efe31-fb10-4b70-8187-3734fded64a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2a94ac-0bfe-48c8-a82a-0e3e1794fa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f7b6ac-685b-4815-b45f-66d0c91bfaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be37c895-116f-4a80-92d3-0ca0b43ae557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76bcef4-c903-4f53-ba8f-df0957b3a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf21389-a805-4bc9-9de5-aebdc8461d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb448864-362c-4eb2-80a8-a206c1ceeaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98be96aa-0553-40fb-bf45-4a4217c866f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab726e5a-eee7-4441-ba96-47323ab8d9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af4b811-e2c4-4803-8b2a-986649890182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0df779-aa98-4a30-9e84-05f2830f6902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d429ac60-094d-4bc1-b7b1-bd6af9760f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d4184c-9152-4b5d-a46c-b082a9316ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd94448d-a7a2-47a7-9a71-4e683bd74f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5698b99b-7155-4e96-a777-0afe5d8a2f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c6584d-6dc8-4cde-8f68-7f3c3c1c3de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4c57ff-2efb-46bd-aeda-8932c77ff8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a318e6dd-58c3-4e87-9dd1-61636fd2d447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b194183-70b9-4a63-88e2-a1ba150cc1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac388d1-92f7-449b-8748-0964409ddd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8b54ad-76a6-4665-8164-216fc7040cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b31028-7a02-4f7f-9d8b-5fd125d45512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8d7b17-f740-4ce0-9055-f2beb84bd49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516928ca-3b57-4424-bf92-a898ced04f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78da7d55-8472-41b8-8da5-ef37ecebd36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.216']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834f905f-3001-4a8f-9f61-21f4a3dc54bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6e634a-c44f-431d-afdf-422101a91d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfacecf-da0e-4308-b19b-a8fbfca26f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a746c83-f667-4f7b-9ef8-6ffa2959a86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.220']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73171170-e42b-4c87-822d-a28d72ac2406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5722f93c-fdb0-4981-b881-f6159b932cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf534b19-8225-48f4-b65c-ade23af1a3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce20ca28-7370-4f80-bc67-f2d03da9a2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd8d813-a996-4dbf-9d12-2ced09513cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.225']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227ecaed-b2c6-4929-b1c1-ac5e623cb05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda2675f-6821-461b-9fb1-917959a19206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a35702-4622-44f5-b3f1-185b9785b12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dddd9bb-16c0-47b5-b013-25cab6487b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ad2cb2-11a4-453f-9eb8-455d60e0f96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b252f4-21bf-497f-8ad1-ce15f184df87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e82f49-7daf-4ed0-9e6a-06c9b816b115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a55b0a-f33d-466e-a37f-7df061111780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f64188c-ab2b-46d6-8972-ea8b046e721a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6cd713-3f41-4cfb-85a6-a7e337fb49ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fd014a-4a4b-41a6-9a40-d0cb55c2ab89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa088cf-cd9c-47f3-8a67-152478ff81aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c45738-5198-4347-bd31-4b10da3df270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483b5d4b-007d-4c0f-8c09-0dd590bccdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.239']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9e5c3a-5e25-4c5a-ab0b-224adb1743f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d91f83-a856-40e7-9bbe-76ebfe54df83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc278aca-c518-4933-98e3-45292da485ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab82f41e-ced1-491d-ad4a-21c71a539ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a175a9-2da7-4022-9735-60c87764b121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e18e3a1-a9d5-43de-a633-008169c0465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3501c7d-25f9-45f2-a306-493e398e6876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146923ea-7530-44a5-81ad-09e92f676406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac5c32d-4480-4ede-88d3-a3f4f4370a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaa46db-8157-482a-8aba-8824b619c6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ece81d0-6339-4c9e-8792-80fe09752f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922f5023-5a64-4728-b5e6-1a3c20303e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fe5e86-3c36-4f56-81d5-e0f41df90742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e03243a-b4fb-4886-bce2-dfd5ccd678cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8accf95c-6687-406b-83ea-9329680190e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c68c87a-5f90-4ea2-a949-9efc74ce0d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0afccd-5397-40e7-9461-55c900a6966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9f82ca-8e95-47b9-9d7f-114669839818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6ae8d8-96a8-4258-93e1-81e0652a0414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad020d3-04d3-45f9-a00c-c42fba025144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90fd0f0-a3c9-484a-8ae0-9b3d52f3a596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c88b3-2e28-48ea-955d-a051b93d8264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7d13a1-adab-42cf-9cdd-ba704e918de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38052f33-51f7-4b42-81b4-0f9c37b00515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40093500-5ec6-4f85-809e-f2179e81b0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c43046-33dd-4478-93d2-72b525dc6d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dad0915-8be4-4cf0-a470-af872dbcee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5d12ce-ff48-4ec4-aca3-f6f0e41a0f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c2a75d-f51d-49f3-b307-c798689f401d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c397587-967d-49ca-b0be-2fb01e3dad86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda2f93d-efc9-4001-84c4-96d055a243a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edc4a8f-956e-4b25-93b7-ea741de4bf92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c456e5d-e400-41d6-9ecf-669555560e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238d7311-7c97-4175-a8a1-64f6e619e1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9c2c3-26a8-4b1e-a86d-a4ef26007b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebedbac7-b23a-47c6-87e7-e8c18fd1e721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda122ba-521f-4f96-9737-8a5cde4bee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebac612-5744-463e-a88b-cd46d27a9e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4f094c-da6d-43bd-900f-fbb9f1a620b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19309cba-e6b2-4c16-a479-51a3ad94fa4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050f16fa-935e-4670-935c-ff14232e73dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf05fcc-7511-494f-b703-e48ed913d78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ced0d4e-5014-4143-8789-a013d6e601a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc816f-72e9-4319-9454-a1ba22ff74a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19141b5-f3ee-4452-b516-aa769fe09c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7a552e-b391-4354-853c-41961b15229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f354fcde-bc57-4c32-8e0d-d10357b63b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382827d0-c551-485a-b521-bcb37d7d774a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722d3b94-95c1-4ff6-90ea-3229af7abbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12a4290-3362-4c2d-a90e-cc77e5c07196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf631c87-705d-4ebb-a582-3a072f9b85b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.63']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d6570a-8d16-4e6f-a7f9-92c926c79de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44235b54-1bb6-46fd-a9f7-52bb1b421720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e81bd5-ffc1-4e2c-bc1d-62b18c9d6658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f8e1ba-69e8-4907-8d6b-6cc88c96d7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2d9ced-7c48-4e10-b0df-3d8e97938886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dc0bf9-77c2-4e0b-9fdf-25a4b18d05b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb95967-142e-4803-a7ee-4b6316927414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60cfb3f-53f9-4038-bea0-f8639f5dcad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6dbe0c-91c1-4c3e-9ba7-02872243a430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4df8a6d-6751-424f-9bf2-3c936c48dbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3ccf38-40f3-455c-954e-c918c33aebc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fdd07e-2ff7-41a3-bd6e-10114c9b68c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95562f1e-d777-44cc-8d1f-4e2a73c25670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff93efb-6854-452e-80cc-37035fe507ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbb084e-335a-4f4a-a45e-339935d74cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3ef7e2-5144-407e-b25d-b1675331395d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb8b426-6a7f-4420-b307-d74d6b460d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c75591a-205f-4493-8714-7619b632356c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41fa14f-9441-47e4-b18d-c2aaee6dd603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e020fc-e779-4e39-a82c-c9d4591c0fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32fa1a9-bbe7-4a81-801b-1193aafd995a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45bf2ab-24c8-4929-a309-f82eddbcaaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7bda14-b071-4899-b49e-5f51b8f03c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce3e30d-e4f1-4caf-922b-4db9f8a2f25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.87']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decb8589-3ca4-4a4a-8def-e5c39096b615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf7b11c-a79f-447b-9067-2e2d6f782c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09ae6b7-82ba-4003-aeda-276bae9d35be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5a5df7-ed70-474d-8254-74126eef3499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c73f38-79ec-417c-bf75-ccdbd1960a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ddddca-7c7e-47ee-824f-064af9fe7910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c724cdf-4ad7-4062-b0ff-4a9105d85ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c568ea67-c8c8-4fe5-9ea4-bcaf90361fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a22059-a8c0-48da-bd70-3c9d56100d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b866138-9b95-4bd8-a348-f5c33b6e792d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.97']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460db471-1ee2-45b4-87fb-a7c5a221d017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.211.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56193c25-499a-4582-8030-15a716f53d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32922ea9-e2f6-433a-9517-3946039ab7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f628c8a3-b478-4cca-bffd-861158298d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd88bb60-c147-446e-9a64-05661f522ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f1c3fe-00f8-49d4-8b18-dc98b0c1d7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1c51ab-71bb-4e7c-beed-497c5fb8f657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315d24ad-b8cf-4dc1-aa3d-aaf657daf236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.105']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a357de-5166-403b-a922-5ec6839c42ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854de3fc-309f-45d2-b9cd-0c3487dc0a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.107']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7518fa54-bcae-4387-89ac-c0aa02c42ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.108']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312645d1-d848-486c-9d39-054b7d2d0f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6582a7b-28bf-41c0-be99-7c0725dff87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d986c9-d518-4db2-adba-28bbcabfb47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.110']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e313571-547d-444a-97a0-9f14326b9ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.111']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aa3d50-60c4-4802-a67d-b03a83f49c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110d9c2d-3772-443d-a20f-00d3ba5d44cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98771d55-eadb-4177-973a-90a0c405cef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9910c6-fe0b-4b87-96ef-6e5c8673d86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4aa9037-0d03-4562-a1b7-68ba1a2fae3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.117']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7f2db0-d114-4c51-b9b3-52cc86bb211b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd83e96-5ddf-4153-91d8-7004f573e510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a49dfdb-1f8b-4815-b190-295e5d9a2125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0ecd45-bfc7-4743-8d0e-b1610e55fb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8373e5aa-effb-41c7-87ea-86cf9641d950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d7800-bf5d-4deb-bc16-e0adf914aba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.124']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714fca1c-07e7-4107-b933-0f6164c753c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc22fd1b-1ae9-48b6-ab42-096058b893c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.126']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd82114-2fe3-4c8c-80d0-d1401db7126d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.127']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ccf411-bfd4-45f3-a2d5-a4f998d84dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.128']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed980cb-04c0-43d6-b5e2-28fd3202c8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.129']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4dc8fd-1096-4077-b79b-bfab3f07687a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cfb459-f41a-427f-b97d-8e8a906fa716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b328b0a-6d9b-4d56-a63e-ebe6601a24fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.132']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec48bab6-8713-4679-a598-f2965ca7a034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf27e04-b42d-4ed0-819a-0ec79125029e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815f8696-955c-41c6-a5f9-a556e304325e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707a2a39-d7e6-4507-9b4a-8a249333f8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.136']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a2666e-e926-4aa6-a755-55d31e48ecb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.137']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a056c825-b3ad-4e4b-8f99-e102fce24918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc18aee-dc52-4f68-ac66-e2485d3b17b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14e384a-3c4c-47e4-a5ab-c0072f85e540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68713da7-49d2-4fa6-9cd8-138e5c6fe7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.141']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdf891b-db56-4c77-ad48-96572e753c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd473d7-bda3-4e36-a815-37160b8b223a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccc3159-fdcc-44b0-bb33-eaf69b6b0e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.144']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0b2ea5-8774-4877-8c45-cea7b0c0a583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.145']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81da3323-e8c5-4229-bec4-13b40e3d2d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fc903d-8c01-4d37-bf8e-50fd5bbfe6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da8eb36-87a4-42c3-854f-09f3a11551f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1d8639-6fc4-4b7b-9f1b-83b51c3504c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d0e39d-b447-4b28-9450-02deade85e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b7078-ed3b-416b-b28b-9b11f61b1222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7619c6-979d-43db-832e-bda51c8bb259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beac1e0d-19aa-48c1-8985-2b84acde04cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60496388-8366-4062-b32c-a41ad61febd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.153']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de2938d-a07a-4ab9-9d6d-2165e64be457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2560fec5-b7b0-43b8-86b2-24d808f1be31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.155']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bafccf-4ab9-451d-af77-83fdb8b59884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4ae863-0d9a-489d-8f53-9cf9b6750b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022d6d55-1d1f-4e32-94d9-b6180a9d7b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.159']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2004887e-3c2a-4cc3-892f-5145a109232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4ce4e1-843e-45b6-bf1f-d64dd852814e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.160']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80479f3-4738-447a-914f-2065dc44e1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee5cd3c-26b8-48e4-b950-71d20fa770ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.162']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d6364d-4804-4d2e-9f8c-99bb2c965d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.164']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3343dc5-bc53-4b42-a85c-e0fa8dcef5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.165']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57a31b9-15df-46d0-b241-707f69cdacde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3741e688-f700-4f07-acee-d6851afb723e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.167']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b6ca1e-2efc-4691-9652-984a830df4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d680dc-6f87-46a6-9813-7ad6a0c79436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5aaec83-0014-46fd-8ef5-8c7396743f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.17']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2a9625-fe31-40d5-b292-f63bcac2b72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd837594-74d5-49a1-b150-5fde2ca0b81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7debcb56-9ad4-482c-86af-f72f7df9d282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.172']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9188dd93-13ca-43bf-8208-8714baf1746c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.173']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f599f29e-90d6-4cb4-ab84-4ce889de7187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf9c784-03e0-4c58-adeb-25d326f8b372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.175']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f2c2a7-2394-4f6c-8010-f949482d976b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.176']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55012448-1163-4f66-94b6-39b85b033ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.177']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061d7fa8-27c1-4c1d-b50e-3b41a1fecd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9878c93-0a0a-483c-a999-fa01713b0675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1550b6-1e94-4131-8b68-f098f8252e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04856758-c2c6-42c3-8ef7-4db245a3e20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9cd995-b9eb-4dab-a61f-dcdde3dc4f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a19123-be5b-4a5e-8967-253ac6b25818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.182']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98b78ad-c17c-4858-ac0a-fe374f83aadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.185']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5477da9a-f684-4f04-9eba-74764bf1bd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.186']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78db42d9-9e1a-4fc5-8d37-f0080a8d93d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c5d4c-05a1-46b0-9ac4-9a52faaa94f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.188']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca917798-1f52-4e8d-a68a-7bd156caadae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.189']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13da788c-b2f8-4584-9f4a-06740bd81ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d4df2-0e8b-4162-8311-f47ab27afce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593f2247-f7c6-4242-9da1-bb0d5ff62143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874bfbe9-7afb-4e4e-8c3f-bc167373e002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9703d1b5-30f6-4426-bcca-2dee6e1bd729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4808a23a-c9ed-4f45-9254-414b48ef45b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69abb578-5c1c-40ab-8a3a-e3a4c04ebf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b732af2d-e589-464c-b6bf-8c3a8ea1ac10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe631e81-0bf5-439d-ac67-aabd2dbada2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.20']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e685c3-4202-4f34-bddd-b5b6e9436083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77940d36-660b-4cf9-8e6e-644baa85def8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08710e0-d958-4d45-bcba-7eccc178a2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e02e6e2-6dc6-48b0-b547-b4d5ba7f2f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b4afd9-93f6-44c9-ab5d-5126a71b3364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111f4504-d738-4bc5-b7f2-3eec07962be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad63f618-9e50-416f-a34c-0a33cae34161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1144b641-a38a-4c0c-9df4-9e7b88bf2cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4463e5f-be8c-40fc-9e2c-6d6b0d558adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afbc1db-4196-4163-abb5-3628dc0cf028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4c3469-5145-410a-a129-09a0509b5871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ed9a05-0c85-4e6e-aead-4a72d9e2bf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e9709f-1b73-41a9-a23a-dfdd1cb478dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5856c386-9125-4efd-9592-55fc0dcae44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.215']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28b876d-d21b-483b-905c-5ff423b4b5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4b4e61-5284-4f0d-841b-ee52de597aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.218']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6159a7c4-ca52-4cd5-962e-c4eea362e8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5f9184-0009-4f68-8881-9e189cf18277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.22']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cae4c4a-d810-40f6-8f4b-5fe5c52c7ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662c645f-ae56-4c08-a627-a8d25c491abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d914c48-f72f-4480-ae4a-0b23cb762b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.224']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8638d8a3-7c56-44fd-a05e-dae22f62cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.226']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22449886-9119-4e83-bda5-90bf0b848d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.227']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8e1bd8-b1ae-440e-ac71-90ddc389cc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.228']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5840b0-0a9a-4a53-afad-5cc9c149fb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fedb7c-1223-42e1-b3b7-364c4c5aa0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e457124-f2f9-47e4-b9a7-1789932dcf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3ff04b-f9b1-416c-9338-0a23ba08e237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714cf18f-6ca1-48fb-818f-de076424291e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8aa5bd-839d-4475-8e78-47d13a89ade5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbbf7f7-99bd-49a6-b360-c08ff98f2182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f2b3e7-2034-4eb3-bfe9-8cb018a794c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b562ec-e77e-4727-9fca-981d1999f608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.237']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787d9089-7cd1-4363-b051-fd66453cce3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4188ce18-8f38-45de-bb57-7e7e4c7a12e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8e1043-40ad-4851-94de-848d23642a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89067d4-82cd-4a07-ac9e-95833d8dc027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.241']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fde94b-1511-4c51-9435-113cc53ad1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.242']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d61a3ad-c502-4540-84b8-6db56db1fb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6f56d3-9b75-4014-8817-005a34036bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6a9926-a368-466d-b95e-bd56186c9934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a115489-ab07-4f5a-ab05-9de0dd96828e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.246']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270810c3-6bff-499b-aacf-bdcf71baed04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e77c21-3436-4752-9183-d2d5a6a18eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68a90b3-971c-496a-af6b-6be3183f1e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8e16ad-1262-4dda-bcc9-2103fa6b5573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.25']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb36cd88-4b88-4081-96b6-55a9d3550d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e924e1f-6ff9-476b-a2f7-139ad430160d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a55e56b-d74b-4418-8a93-d60092edc34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672ba8e2-a801-4a35-9c4d-1124f8dda9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.254']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb43cc23-3fb7-4332-b850-4aff6bff401d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeae0b21-0088-459d-9719-bd315f973f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab1e73c-c567-41eb-a54b-11d8a306dc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b844c4-ce40-444f-93c8-1056c0a5307a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ecb3c5-7f01-42d0-a9c6-346d71ca395b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbee3c61-f0cd-45aa-81d8-6cd6755973c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c4b00c-6e48-44a3-bc07-d798dfceb943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb072d63-512c-4002-acc0-f4d925a513ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4dd0c5-f834-42eb-b994-9387b96f1e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a3f76b-0584-4fbc-a162-59a0879a293a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b92769e-1571-4efa-8ddc-4cbc555f599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac23380-e6e6-4d1c-84e9-f7bb831414e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90535118-6f64-419d-b36f-92fc60b74cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc779daf-0c9b-482b-b6e6-7f4517a7602b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd9c4b7-89b8-45e9-9160-0c26b50d03f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841f9029-546a-48eb-b209-9646e17cc289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbb7a4f-2a05-4867-b963-a6f51e9842de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a3917c-f358-4c4d-a331-42b204a125f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf7a91-47d9-4ff1-b529-d4c91cd6c784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a57f905-291d-4ca0-90ec-9e68ef32a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d62c75-83f7-49ec-90c3-703b548cbf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecab6269-71f0-4013-aa0e-d5a859025ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80bdd91-d349-41f2-8f1b-9eb3898a3611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7c667b-21b3-43d6-983f-8064867d2381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be072ec-256d-4b26-a4aa-4aec22d4d707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde5943b-1ab0-4235-8bd3-c44b9e7af285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee04516a-49ce-48f8-b5bc-13c83887f961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de6f809-9f0c-4f46-88de-3d907cfbee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504b67a8-b1bc-4e0d-83d0-4306a16b7503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0e8b79-a72d-48d7-8d5d-dfbd8cbaab01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e79b3ba-c43f-4a84-80d2-381d7dd63955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0823cd50-b6d2-4d61-8295-2f7ddaceb669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099e33a1-bf40-4726-b6e5-483f00bd58d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca45cf0a-0a29-410b-8692-8546f4e9d738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3954e02-d32f-4b03-938d-2f51a3f6be74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057c53e4-8a4c-46dd-aef7-1e9ff7a85782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50f4510-a1a0-47de-b38c-f3f67ab5a465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dc7cca-f03b-4a9f-939a-052e65c058c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10f9e7e-91b7-4210-b041-b22892e60ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fcc3f4-e829-4d8b-a931-4e29f5547572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eada0275-8eb9-4090-bd9c-eccff57cce57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d16d846-7e44-4dcc-b6bd-c0054fd69e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a8cf1b-0de4-425c-816f-f822bdabaadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6b74e0-0556-4678-957a-fa8bf8168f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3355f677-4be9-48a3-84e8-9a736c3f8be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365a6e9a-e3bb-4f45-8663-d76b76f9b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15aae1a0-012c-4451-b6f9-4385695c8b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eab92e6-7a5a-4357-af7e-38299914dfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b662340-b205-46c6-926c-15f2e2a8ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ff0fd0-a76e-4971-8ddb-d0dd323501ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45f435f-e68b-48f8-b9c0-21831450487b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.80']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d1e8f3-74b4-4430-b6f4-345e9fa9d579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.81']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad28fae-6f56-4b75-a1c4-3f4c4203106b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aab4ded-064e-4849-a598-b7b045083887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514c7023-fd4e-44d5-b60e-949b6cba35c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21eb16a-1102-4590-867b-8496d63fe7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1514dbf-aef8-4365-9dd0-d432081a6446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.86']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab74f24-3e4b-48e7-8b34-e981c9dc7456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ea9943-cf5e-4641-829a-a87c9c57311c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.89']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69652c5f-bada-4f68-a0e3-2584866aa894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e450a6f-739a-4c7b-9891-ec976d6a53fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ec7c0c-39da-4171-b841-383d9b956926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70285ea-f7bf-46e9-af57-41ea390a279a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77efdf92-3e41-499a-a9e4-7eaa0be72c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb20840-89a2-4bfe-ab34-479ac9df2f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.95']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e1949e-72d9-4093-a292-4cba1f977c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.96']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f8dc84-6cad-452e-93c5-ffb656f5e18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d295623-7a6f-4d9d-a81f-da97a5952d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.212.99']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5eea51-167e-473d-813c-6d2d890bc95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.0']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d41153-6d26-42e7-ae5e-1ff92dffcd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5074dac-0300-4d1d-b006-659465836bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.103']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c330ce-8de6-44cf-a4d5-cf5fa4cacae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.104']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62bbc1e-0a21-48b6-abfe-f5789f6f987c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71b47bb-5578-4d13-93d2-42a01b8e6b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.122']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d042693-c275-4afa-b3c3-d8e634f0f298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.130']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596f2502-899c-4593-9ada-5916ad365c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcfe6ed-fbc7-42d3-acce-f3a94cd73a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943b0aad-f8fb-4c2f-9ce9-632f44f9c1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.142']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6aa4f2-c750-40ab-a58c-bb2acebcb22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.143']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab262b5-bf13-4e70-b822-9403068e5e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd921fc-76dd-400c-ac4c-18daf870d25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a18518a-9abc-49f0-9236-874d6ad94063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.158']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f294d972-4512-410d-b66a-a7e1e313aed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bb2c92-065f-4323-ae27-5c92c5deff73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.166']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bc40ef-4a6b-4c51-a695-90d259a7ff61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590522db-d8cd-44cd-bead-463f36ac9f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1e8bbb-f082-4ca1-8f3b-b51c11588686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea228d0-147c-416d-947b-905f3328ee7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cef19c-0f1e-4a0a-8678-5b5acb3d6288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee81eff9-900a-4d0d-b1c9-2303f4a75189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88df4b14-b2a7-46ac-a1af-6e7f6c428745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d64e56-3f6d-4ccd-87df-15ec395b08e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.183']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b260ef-43ad-4b44-867d-977cf0875012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.19']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4723b7f3-b901-480f-ae10-2657361922d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cbd87c-2bcd-4a84-bbb6-1bc9bc9b68d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85727e29-57fe-4b62-b07e-78fda56809c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa62781c-386d-4c78-a8b1-31fd9450db27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb311b18-bb5b-4ba3-97ad-7ad10ee3bb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf548f8-95aa-4740-a836-f6c90eb946bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3d89f8-7a1b-49a6-9228-dd458b89464c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b63282-e051-4009-ab96-eb5ce8d041e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7b4e5b-091b-4d0a-8800-79d07972c3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42839d1e-8686-481a-a327-2ecf1357a128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.214']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1556ee78-e778-4910-9187-e43074581bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a3009b-7716-4014-8ef6-82147d45462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9615743-062c-4ee0-bd1b-97c4ee1d6748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecc2d0b-adc4-46e2-a5a3-6dc6fbb8d2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.23']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605f5b90-11fe-454b-b9f1-de0e7bbfcdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.231']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78c70c1-c479-4c0a-9908-fa00911616db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2923dd2-bc01-4b22-81bb-d966826c0c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.233']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61902f9e-e8c1-4872-97fd-86af15b932ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82146e47-b0ca-467d-90f0-a03804fa1331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4287fcc8-2d83-440d-8b0b-4c4b30f1f843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.245']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeee8070-5d1a-46fb-85bf-237d9bf4c09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600d4036-52a7-4b27-88e8-810fcab108fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.251']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef4f0d-c3e6-4c08-9654-e6061f38f2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.255']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152e7073-f6fd-401f-ac6b-2efb052e805a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f125161-e720-44e8-93e7-75bd4ebe0c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09bb02c-1111-40d6-be81-b32109056fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9081bcbe-a731-4fef-a2c4-83217d9623fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0d75d7-083d-4dcb-bea9-22a15f62a06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2abba8-c725-4087-a1da-2809d6e7420d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed64edce-ffdb-4c33-a34a-7d8533af57b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd713c7b-3589-47fc-a8d0-88d4f68d4388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b17e9c-b254-49f7-a080-861fe8b8345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73d7942-61b7-4d98-a477-dd39b29b9eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e361b29-9c05-49a8-a8e9-2359710671aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b3047a-89a6-4c92-aab7-6a267112f807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c89198-a116-4def-bcea-fc6930cbac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bbbcf7-cd49-4d65-9446-7d9b1bac439b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86724f4-c741-48b5-8a7e-241be37966ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eb186c-053f-4429-a103-682a83dd8e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bfe122-6ee7-4079-b24f-65fda02670bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4d103-dfe4-4e62-a6c9-bd1c1dff2df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce5cd1-0ce7-497c-8a44-dabc800ded87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db578f1-7cdc-42a1-97e5-832e486f11f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700c2b38-2007-4b19-b5cf-acb406e36cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b5259-f936-4ee7-aa81-5b3413b22745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1c2fdd-fda9-43f7-8cf5-94d7953f5eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.91']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614e979c-0c0a-4005-aef0-9bfc2c788a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.162.213.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a2a065-2a09-4f4b-8b4e-ed02c76e1cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.113']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d7dee-6a0c-4f14-8217-22f6b8516d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4735a5-07cf-4e00-b42b-5d4282fd0452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfa25c8-286e-49a8-bc6d-9d303cba7e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c0d7d9-6eab-4420-b5c6-acc51785f8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d65972-3048-4e15-b97e-f7d350b8c974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.221']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bddc92-ad84-442b-9119-841c95be6a24", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.234.88.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb88bb5-5246-43e7-be9d-922f2949b720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.167.234.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0cba57-a428-4111-8381-dbbbb7519fed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.20.131.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ecee84-9a2f-41d6-9ae3-97cf29efb340", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.215.101.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ab8710-5b19-4fdd-8c23-b6d6498efe6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.63.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6662d467-1cc9-48bf-850f-b08dd83f788a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.30.75.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0138dd51-4454-4596-b0d3-501832cdc84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.65.208.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32afb076-140b-4b66-afd7-decfe2b9b19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.66.103.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5e29c2-41b5-4442-bd69-70e1593137ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.100.236.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2b196f-93a1-4799-97a6-e2ea9e0b16fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.213.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4050998e-88ac-4588-ac7d-1cf019894f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.157.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1118e2a-87c4-4044-b696-484af369fc66", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.70.217']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3d596c-a075-435b-8c30-b27c511b475a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.33.8.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a833534-4835-41b8-91c9-a523dd4c4aaa", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.71.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e79b98d-39b7-49a4-a7d2-d4fe226dae55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1fd1e1-4abe-48a0-92fa-5f894afeb232", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.124.151']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dbdf3c-04b0-4205-b1d8-bb8e79e28f15", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.165.104.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f42f0c-e20b-4fa9-8e80-92b6d734a1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.185.55.33']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67406c17-b4f2-4eec-b532-c5d27b860377", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.46.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4817732-ba32-4f35-a335-1db22e09f7ea", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a37aec-dfc8-4c9d-bbbb-870ede46342b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fcafc3-69e0-41c2-b501-dadf59ebf87f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50024220-5115-4e31-99c4-9ec3e5430586", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f896d44-1a87-4c00-b3cd-29c82074cce6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6533b22-0751-4db2-89f4-5201b3bcc80d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad08615-5af6-4524-a691-936f6b6b6bef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11727ac9-0309-46eb-8386-267633de8ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4a7a9a-22df-4a44-914d-920db5e62ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fc09d8-2b54-410e-b16c-b6c414341af8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814430ba-fd46-4a76-8782-2e1f12da3cf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402ffc91-ac7f-492c-aeac-a6a2284cc307", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f118b95b-e42c-4013-91af-4f4423e6bf2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040f3ffa-ec1b-4168-a2a6-098e160d01a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2352156d-81d7-481a-877a-354aa043014b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc47577-0b37-46d3-881e-7e54689cfca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39ec93a-928f-4f32-91e2-12b7ccdb8525", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01fe777-3350-42e1-98e2-946eacd57f08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefffe7b-4866-46cd-ac69-bfceb38b81d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7705462d-6543-4c19-a02c-ba2e5ad867a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43aa22f-bda0-4160-84f2-9c031e06dab4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf85b29b-d3cc-4a99-b590-dddf96220cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.209.84.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77cf926-79af-4ef3-9544-22a711388ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.169.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac572142-5b77-4da1-bffd-786a699d1689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.237.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f605477-856b-4573-8b0e-987224a7a34c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.254.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98683706-bcbb-4d72-8a52-b034cbad30d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1114c-ac50-432c-bc81-04fbd01761d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957dfc5a-fd1f-493d-8f47-f48bd9e1bd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860dbcfa-d830-4176-aa5b-da31db54423f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126b9608-be2c-4749-a2ab-39dbab7d98e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0535c2-5646-47e0-bbf7-6d7898e3474c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff10cef-a420-443f-8fac-e3e8a9e88a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c008e78f-ef37-4c48-9f0a-c2ccf0f70cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8d6a12-5e67-4f81-b3b0-48ba255102c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff7d2d7-d0d3-4a22-8103-b7f9b86ac5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48a4c84-e6c1-4b0d-9c00-b7216dc8c9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27059b25-0807-447f-b3ac-a89a5c7335e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe5a33f-ad8b-489a-84bc-1f68e2daac69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9a39f7-7361-442d-bd70-7143eb0d4c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22be9fd7-bdaf-404e-978e-2d4ff710aa90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2001d030-068c-4580-8704-30e1ee9a1bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66d37df-db04-466d-8c9c-b0aaf71286ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8b861e-25c5-4c7e-96e6-27ba637a282b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cd432b-ab42-48cb-86b3-aa3364b1c282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9ef49b-428f-41f8-b6aa-d1a8d5972602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb055b84-7d19-4729-99b2-ddb4f81657f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fe1a31-a1cb-48d9-b651-f82e8df4106e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ea70fe-3bfd-428d-86f7-768198c9cd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6110103c-c3bf-421b-82c6-d9f54d704cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eff30d-9ff6-43e9-8bb7-b6cff5fbcc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0745b1-0573-4c2d-829b-c08902b55664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d322d6-ca4e-439e-8c23-8b41288f1b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc44eae-5fa2-4ba7-b17d-9619c12cdac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc6a018-ab32-480f-9d03-4a7880adf0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca9284d-57a8-4072-8a9c-54b1e709e288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405ad29f-a4c1-4898-a4ca-ab1602825151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42218267-a50c-4388-96f3-a8be4d10bd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ecaf29-2640-47d8-b95a-d0afe289351b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e588e4-d695-4017-944b-71b9da63b827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc674df-6303-4d04-a463-ab6b15397568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0f6196-dc3b-4df1-85fd-8d1c7fd00268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b7a2a2-26f3-4d58-a7b3-fa6d772669de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31e852c-ebce-437e-8280-8a4b13e4f6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.37']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc5aa62-a5d5-462d-ab3f-4bf4fb44dc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77c4e95-8ada-43e3-9c7a-23fbfb170c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2825f42-29fd-466d-be86-a9b005c4b341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e79723-ee8a-44e9-bd5d-5f4f0704d7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e715c819-625c-4ed8-bb40-85df9ad7ab73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18229aa4-e9e2-4506-82b0-09d440aa4fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6036fe-8eba-4092-b4db-ae93a49e3c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5483c2-1877-40b0-ba3e-5789b6d49c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49bfd19-d9a4-40bd-9b12-f7138fa1fbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c21e81-9b8e-4ecd-9c51-ceea7ce88496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b232761-4ee3-47fe-947b-50201a640f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730e55e6-3a58-4b8c-9959-9fc12209c600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67331e34-9229-404f-b611-92fc4997f3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bf8c7e-b777-4bc4-8731-b5c043924be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c529c04-61f1-4995-a878-c9c3ff47529c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cca970-83c2-4cd8-90cb-9128f049ba8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74cd57a-f1fa-4304-84b8-f47240e12c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2347034-c93f-46fd-baef-e6e659d6b1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412cd9db-2ff7-49bd-9964-fbb61d54702c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606a379b-3181-4deb-b6f4-9e2bcd0120ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7459d6c-d57c-4cdf-8d46-e612355cda9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5525d7bd-fff0-467f-a332-314d954ddaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1302f362-4c8f-4c81-8805-3d0d9f0c625a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66393f0-536d-4166-b50d-0e3befc20567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd700e7-e886-4dbe-b800-39c5ff55a67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e52dc50-9737-47c2-91da-078619917a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7800fa6d-68d7-460b-b71c-58f43922b470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9e7676-92d3-4025-8ade-dcd9b9115312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5e96fc-5ee2-4d46-99a8-32e8435c079e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378bf1a7-2ea3-45be-b845-c97a0c307e7e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.29.137.56']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c854b06-7585-449f-93e4-c2f597b1b8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.72.60.27']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7191e7c-9461-4499-98cc-b8ef066a019f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde81b2f-2d9c-479c-883e-557c82ef08b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a69025f-3177-4421-8d7b-96821d12ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245cb1d1-bdfa-4118-adb3-e828f5275e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.92.53.191']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61eb10a-70b4-421f-8f6b-7753d630f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.107.3.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29aa4b55-1fab-4230-94f6-3ec957471318", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.114.172.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd638ef-cc81-4d97-ab04-0a5ec0b1b725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.54']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082b487c-c060-482e-8d03-af57c789c20c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.85.235.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15f44cf-f515-45f3-92f0-602a01b26eed", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.174.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451e4dd0-7646-4364-ab59-3eb6094f5814", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.175.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a368e9-8a45-4813-a0bb-922b68db09e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.32.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e63844-671f-4da6-8279-07e3db10d70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.216.56.171']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204cc947-e3ce-4819-b29a-b254bf287a2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.226.107.67']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ec4f92-4a2c-4aa2-8118-fcbdf9bd66c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af22049-7afb-4b71-972d-8fa8a268a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.124.69.181']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eec03b-70e0-423e-93f4-4ee6dd11db30", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.126.214.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348ab836-2766-4203-8cec-c0ff543c11f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.26.79']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a7c6e0-9f93-4711-a636-77a9b8eca285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.133']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e044a0-3368-4fdf-ac65-175e0795c0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef633f93-5ced-4b96-9393-d7589e5ffd47", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacfb623-9b9e-412b-b609-6af609355d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.179']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c36ff6-035b-477f-b3e2-e285b0adc62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.184']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c2f0b0-deea-462e-a1dd-14af8e93939c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.219.34.204']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84747c7c-a1f7-4c9a-8575-80ee6500ee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.168']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280a6076-da20-4b58-8970-3e8f201b6082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.165.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0731870-07af-414d-a9bf-115538c8c40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d26453-2191-46e9-9afc-fb7b440968cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46d7613-d045-40ed-be05-0095fbb690e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2001de18-bacc-4ebb-8b48-11e6d076482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc6f800-6ce4-49d5-bb53-14f9aff253b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391ae02f-1b24-469f-821b-90a411030a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5f3664-ed22-42b0-87ac-41a10a1d7c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9904d31d-1034-4e7b-a12f-d5d466589d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.58.36.206']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32069e27-5c4c-4b27-ad85-b7d45f10835b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.19.75']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4e434-2204-4832-8e6b-6fd4b2dfe77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c910c59f-b8b7-469a-b5c5-87eff822d87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dde394-a330-4720-9d56-96cc1587a938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e22c9a-5904-48e7-a28d-5fe00328ed8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.102']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f96771b-cbfa-4913-bc95-6c0bd9bc9b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71577f86-4e27-4172-8e0c-2ed4a4fbf810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.18']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af899aa-9794-4ce0-94f0-8eb3533e18c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6097cdf5-18a0-494b-973b-f8f221631334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32533ba6-902f-4d95-a8a5-44be01136611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a346b920-604a-4352-9c9b-49f8ff0714e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38b205f-e842-41a0-83ba-86ba98951824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6073ffc5-c4e9-45a9-9375-43dd60179e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835c8e4d-dbb0-4e98-91da-1f87ae29884b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbceba8-e6fd-4c89-9676-52724e9d413c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eaf6df2-bb6b-4fc5-96a3-09d2bb9be247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34700bbc-a869-4052-842e-aff89220a794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1965144b-c200-488c-90f9-635f399bdb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.201.168.112']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81dc55-dddc-461e-947c-84377831a120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.213.33.119']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afdba03-d501-4b9d-905b-baa76542dd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.28']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b5fc64-4597-436d-a740-04b05caed724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4a8d01-9d8e-42bc-acf2-940b54b1d3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44fff20-09aa-4fd6-a81e-dbfe265dbb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db16c4a4-c347-4d23-a46e-61f0ca717d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba48abde-3737-4f51-8916-ef5c548cf778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e72dd-2093-4c4a-bff4-c3fee45b5a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af5880b-7ab9-4610-b59e-f4469d29eee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5a78fd-e482-4c85-84c2-fdfff4f0354b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.199']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b5d41a-d579-4e98-a4e4-139a80aef225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f083237-d630-4e87-8194-6c469be8df38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa26ef-dc7d-4896-94aa-441188bd2169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c6978d-c1ce-4719-aeae-7b667d436d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.240']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4fdf8f-c1cd-45a1-9d29-e0ae38dc4da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.244']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9788e922-8e3c-4c2d-84ec-842ab8be961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d571616a-42c9-4c1c-bb85-fa7b72bd723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edb6c6f-39d4-4d68-b9c0-5306ab049f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac7cb66-0fca-44b5-a609-87bbe7872392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.38']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b989c798-fe34-437f-84c6-a5e0ff448b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf8688c-84d4-4a30-b7ca-1306e806f92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.82']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdb5ab0-2825-4e47-bfce-b52fbc35c1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324beea7-be7e-4317-a6ea-bc52786afb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c506f0-8b5e-4052-ad5a-7e5591e0caa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944ad847-5ada-42c7-9ccb-d4786d604c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8bbd34-f7cf-4cfb-88fb-c5a5d15341db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea76ee2-16f1-47b2-9267-f8287b2354db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9025112-c8b3-439a-a661-2224a8c57577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88b9e38-0bf8-498d-82a0-3b662b591741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a133c-1783-42b3-b50e-673e9a2879ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8549dba4-a7e3-4153-816e-e4c0110057cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746621dc-8441-40aa-a5f5-86ab95bfafc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.198']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0809ad7-073b-407f-b48b-9910054fe009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad4e8b9-bb88-458e-9864-fd73ea90ee39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898c52ba-568c-4416-925d-088099f92dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70118dc7-4ab0-4271-b540-dee8da9f492d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aa2cc5-5ade-4fb6-8964-22d9caa4b631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c78942-2178-47dd-946f-d9f305308ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.26']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8476c2e-616a-4bdd-9c02-ec284da07ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1b0759-1437-48f0-adf9-bf8946fc5cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b5a190-dedb-409a-8e99-07ec83eea195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d1580b-e777-494d-978a-75df03565b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132cc56e-1aa2-450e-af59-35355c96448e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.238.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa8a66a-ec95-4397-a3fc-c65c34e543b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.153.208']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45844250-f13d-43fa-b52b-d8cf15151f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.50']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9e32f1-a2e7-49d6-92da-24eec02489df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.242.253']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e4e647-df97-4f61-a5c0-43f593eb675e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.207']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b0813a-d3d7-4bd3-b81b-e66f5c9eaa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.236']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee86991-8bb8-4833-85da-229e5e253655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.200']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4e0d2f-0cb0-4c12-9666-75af0bdb479f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.45']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7957782-86b5-4f0e-a079-6c3a2e82d1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474cf0f8-2116-4f62-9a78-a58c609fcc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a959d9df-370e-4e49-aca0-14e286a15cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e3f32f-cab1-4265-9e01-6a625a6eb637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.92']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee36513c-28ea-436f-b99e-c710e6c17cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.93']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26a7421-bd48-4761-a91f-911cef44b512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a643d849-02e5-4066-89dd-b6a26d5d95e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.58.235']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fff0b7b-524c-45fd-938c-8c90a5cede15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.27.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3d993b-b83c-41a2-95cf-f493e786664e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.45.221.161']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4347f7c6-8c58-4902-88de-6b529021b7cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.47.46.174']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a7433d-ab6a-4ff4-aedf-ca1ef9fec664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.6']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0134feed-32bc-40fd-8869-72607b00099b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.118.148']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0564f31-9bc4-4b2c-85ca-db47a8a3f5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.118.149']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d3ca66-d056-49e9-9b50-3e24cbcb798a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.219.115']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31af03d5-8534-4153-8701-1420c82d0318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.201']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7199cc2-ec77-4ab4-8c3c-5272a8a4c254", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.91.24']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056296a7-c99b-4aa9-bc1b-3effc3c9cbce", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.170.97.77']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79980f49-3b61-4043-9e98-6ac0c14932d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f66fc7-5179-4b9f-b470-323e9c496ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.64.139']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb09043c-cc19-4e1c-a473-7ceb4e8810e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.185.36.94']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4f8448-ac0c-4669-a77c-6571e42456e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.100']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4c01bd-6ca4-488d-8614-3d26736be471", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.125']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38068f0-3831-4c75-a2b9-65b3107d3b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.138']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8ece09-32bf-447c-98b6-d1eaa6613b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b25ac27-4d94-4d92-b52f-ad21afa7e50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.15']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149e9269-afc2-4404-afc7-e95ba9825afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.163']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d222dc18-562f-4aad-8052-e906bbb4c4ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.180']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: openwrt-luci-rce. CVEs: CVE-2023-1389. Sensors: revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.203']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--225fa7c4-7441-4efc-8158-36bf0fb5a7ab", "relationship_type": "indicates", "source_ref": "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "target_ref": "attack-pattern--2ffc85fa-0cd6-4fd6-9c4a-e996c49ea16f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cfdc2ad-8687-4447-908e-fd13d90b4b7f", "relationship_type": "indicates", "source_ref": "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "target_ref": "vulnerability--caf40b3f-7876-4088-9cdf-8276a0901407", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d86a3d6-e504-4f0f-b533-4ed11d30511b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.222']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db949138-8dd7-49cc-bb70-f21711a1f2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.223']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e1de3c-deac-44e5-a054-0c52aebce05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.31']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f5cec1-7718-4f45-9db7-f64a99367cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff394de-9c76-45ac-8827-9627b010101b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.57']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58ab89a-236c-4f12-9064-b498ffe6ed04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.60']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57b78cc-da07-4c1a-b678-1746c43fee2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.69']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3029aebc-0949-4114-b639-23def8fa1083", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.70']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e056c613-4000-4c40-b34d-9ae5ffa134ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.174.83']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be07791-5fb5-4e41-abc9-83d45258f50a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.202.15.72']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4825f10-3eea-40b6-abd6-8a65746f0747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.203.133.234']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbdc3e4-bdfc-4534-9cc7-f0958a250856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.230.135.5']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7388f1-3839-4fd2-bb02-cfea131c91d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.2']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a9f6d8-14db-4826-a594-b2d2718e2083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d104e3bd-a4a9-474f-9677-683ef7cece1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.12.190']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed2e7b8-142c-444e-9dc7-b7814136600d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.101']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4734d0-c73f-482d-af3d-09730823eb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1097ec-a8f2-47c0-a4b9-6d10a868f2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.103.76']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0994b21a-1092-46b6-9b69-a857999642e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.137.135.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f62f30-3f4c-482e-b132-eedbfdbadb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f485b8-0a7d-4737-a3f3-09d31154e9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.247.232.10']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50195bd-5bf8-4082-90cb-974417e116b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.70.198.230']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed51382-e161-4df4-9c3a-fefb6d11e60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e7bf7c-4a13-4458-ba4c-556160fa7255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5fb0ca-8af1-4556-b1d6-7012b757090b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.236.4']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a54de5-53c0-4200-bceb-3022d5d6ba6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.82.154']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab4ebcd-9446-41c7-a009-8c8ade91cb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42adef61-0327-4517-88e3-ff6de17757dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.16.247']", "pattern_type": "stix", "valid_from": "2026-10-03T00:00:00.000Z", "valid_until": "2026-11-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-10-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d15fd4-6571-4fa1-ac22-d13517da90ea", "sighting_of_ref": "indicator--c346d634-2f8a-4762-b9d8-4451a77e4509", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964783a6-cafb-4598-993b-63b1a02610e5", "sighting_of_ref": "indicator--e12cecd8-19b6-48b3-8059-5a821463e738", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca876297-6f32-4cd2-8bbb-7e977d7119a0", "sighting_of_ref": "indicator--a960d38e-62bf-4a8e-ae87-f3abcd5e7f3c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bccdfd8-afa9-47d3-85d3-56bdc405b2ae", "sighting_of_ref": "indicator--e9ec7e43-d6d8-48e1-b254-b6f64b29859b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28797d99-e961-401f-9ee3-d50b9356b435", "sighting_of_ref": "indicator--9efc8ae9-c587-4421-a213-5391d7ad01de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c5293d-b3e2-44ab-8fff-63879013a0dc", "sighting_of_ref": "indicator--93f3348c-fb0b-4363-ae37-6e60fc0ac3fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e82732-b4fa-4b03-8c19-9d20a5e30259", "sighting_of_ref": "indicator--0b7a6de7-807e-476a-8107-4e9cbc656838", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f96404-9f36-491d-94be-7495081c01ed", "sighting_of_ref": "indicator--d714208e-5439-433b-8be5-3248168bf51e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c64f9c4-0fb9-43f7-b415-bcf03422c974", "sighting_of_ref": "indicator--e68bfcdd-9232-40d5-9841-57fbf26ac1c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041fbcd3-330a-4842-ae90-e14515940e81", "sighting_of_ref": "indicator--1b1c422d-5540-45df-b81c-186cfb6b58ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d4bbda-7914-4afb-9710-b9180dc5ca26", "sighting_of_ref": "indicator--956e1edd-ef3f-4d45-a711-357f6a5fce54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70a18dd-6563-449a-ab9e-c6e70fae2dc6", "sighting_of_ref": "indicator--67a578e6-9037-4aa1-bfd7-888db92e3c78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9cd937-5ea5-4ef0-8598-b3531d78c883", "sighting_of_ref": "indicator--6ae5f6c5-7c0d-4778-9c59-ee0a70f3c558", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabee603-c54a-49b5-b081-11aeed8acc88", "sighting_of_ref": "indicator--6772f783-60f2-44db-b993-e462299ec6fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a07dfbd-335f-4b03-8e94-5acec3369155", "sighting_of_ref": "indicator--3fbee18a-8b71-48d9-b7f5-57758501717a", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16f4167-87dd-477c-b816-66daadda57fb", "sighting_of_ref": "indicator--2e9f6192-d5e9-40fc-816a-b9d4e75dd923", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a691aca1-fc95-4c1c-919d-4df99a3b900f", "sighting_of_ref": "indicator--084bf69c-5174-4ff7-895c-f5853be4380e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad7662-6f87-4bbb-b192-ee6b049a8da8", "sighting_of_ref": "indicator--849e8285-ec89-41c3-9c8f-da1ed0da1ad4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b716ff9c-7a43-4642-9536-0c421f063d99", "sighting_of_ref": "indicator--d59bb1ac-ad87-49d8-9335-f4303cdcdfff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf52640-c2a3-4c4e-a8fc-29752fbe0f18", "sighting_of_ref": "indicator--f789c852-fad9-469e-bce0-ff53fea846d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836fd848-a108-4c87-bfe3-1558a707f4b8", "sighting_of_ref": "indicator--79df0e49-55a4-4613-9775-e8fe6651b1b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677c78f4-cf69-4793-8187-648f0d70fc44", "sighting_of_ref": "indicator--35aac28d-0806-41cd-8073-bea399ba225b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10461b05-fc04-4d1c-ae50-b112d583c74a", "sighting_of_ref": "indicator--e243447d-2c69-42bd-9337-4187f12b634f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc469abc-2993-4fd4-80e9-5c7a03da5fb7", "sighting_of_ref": "indicator--747c9c8c-b022-48fc-9507-0649fb39e0ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0555296-a325-47c2-85fb-5fc5e5306740", "sighting_of_ref": "indicator--9b85cb8a-df21-41aa-a7db-3a945e6cd9a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018467c1-99d5-4c5b-ae97-84bd16c6a8f3", "sighting_of_ref": "indicator--13ee2d65-b501-4851-a316-502b9e6f61f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c631d8-23e9-4012-aaeb-97327be32075", "sighting_of_ref": "indicator--4ec28467-c8be-4749-a220-d4ec5c5b7235", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce8c9ba-7101-444e-813b-ea79bd8d7d9e", "sighting_of_ref": "indicator--b3fb6d73-b26f-49cf-8422-964e36a0e349", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1e927f-ea86-4ecf-ad5e-0ff753a2fc62", "sighting_of_ref": "indicator--4e0b3000-e8d0-4559-b013-2d369bfb8684", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a19cef8-6b4e-4a42-b4dc-4bd4d9e48969", "sighting_of_ref": "indicator--e256e7d1-b61e-49bf-bf52-89505defecaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7af6548-b952-4f9b-97f0-1c25494e0aaf", "sighting_of_ref": "indicator--d08122e8-103a-4fc4-b794-f7939f6777a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678caffe-38d1-45c8-bcc1-de80993ce271", "sighting_of_ref": "indicator--9e231eab-afda-42f3-b612-7e7c90024cde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f589eb8a-f8bb-4fc1-8693-a8413cb850d3", "sighting_of_ref": "indicator--c86d4b61-70bb-4c8d-bcee-1d5dae07cfcc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277447ad-7012-4b17-ae9c-8cabf72759b0", "sighting_of_ref": "indicator--831513d7-ddac-4afe-8ae2-55fc21e92728", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5702571-c660-42a1-8767-8a53ab8039a2", "sighting_of_ref": "indicator--179178d4-b98e-4345-ab19-b5e23efc8c49", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6485f0b6-63d1-4ba1-9ecf-67528a51457d", "sighting_of_ref": "indicator--c1d1881d-d0cb-4e35-b6db-7b17a1ed57e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b32ae72-80d2-4f11-8e2c-22810b720000", "sighting_of_ref": "indicator--8dcf750e-d44b-4012-b659-25af524248fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dedeb84-256c-4df2-8cd0-61b6fd396593", "sighting_of_ref": "indicator--30f85c9e-450e-41f1-bea5-658bc789b6cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4689427-35d0-4151-8242-504508aadb03", "sighting_of_ref": "indicator--721600a7-ea48-44d6-859b-4247db6c5a57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1925f47-7cf7-44ce-8c54-41b6e527dea5", "sighting_of_ref": "indicator--f2d61111-3206-46b0-9f41-180260b9f103", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d2361-fa00-48db-a764-c67bd6ed7c42", "sighting_of_ref": "indicator--6d96c2bd-e42f-45ad-be6e-7730742739c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094c4602-5206-4508-81f3-fc5e3e0087e6", "sighting_of_ref": "indicator--6fb825e3-3921-45e9-b01b-7c50a1b004db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f81a48-30cf-4480-bc27-8b8215d80ab2", "sighting_of_ref": "indicator--326d0962-5850-41af-a495-f0d31daf992f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e575a7-4217-4af2-83c3-19ad25cba47f", "sighting_of_ref": "indicator--245c82ef-88c5-47e8-ad77-36d9a5fb320a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c5ce9-3a3b-425a-8d7c-64e1ed35e836", "sighting_of_ref": "indicator--04f3d678-df2e-4629-a1c0-209fdc56c082", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2a5cbe-44f5-4c3a-8b86-b2e61f79c7c8", "sighting_of_ref": "indicator--cad649e1-9489-4738-a9d9-cefaa3879bc9", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba7c36c-ef31-48d6-ab5f-e6af728dc6be", "sighting_of_ref": "indicator--8f3a0739-72c8-4db2-915a-b2a517558eb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a605433-9fb2-4670-b5c1-93a8d7872b57", "sighting_of_ref": "indicator--f6607d29-a561-44af-9142-f6ad6f329f90", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4a081d-3d9c-4989-9dbd-1c6f1c41e9be", "sighting_of_ref": "indicator--4716c5a8-8ef7-451c-ae0f-f67fa0160e4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f92b8a2-12a2-473d-9542-2089c1853b28", "sighting_of_ref": "indicator--c1e5e0db-03f0-4f52-9e48-00efc8fcd105", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d8b7e4-7830-42db-8eb0-ea39e624823f", "sighting_of_ref": "indicator--a91a2c2b-e360-4789-bacf-3d95e4922410", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8fc0ad-3a3a-4673-a122-11f65285a16a", "sighting_of_ref": "indicator--aca7624b-136b-432a-a44f-f2afff004368", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c16e2f-cdda-497b-b094-502f35c6ffda", "sighting_of_ref": "indicator--5ed94f6b-4cbc-4725-87fb-3aab1c577c49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2770f7-3737-4086-b38a-88a5b4087778", "sighting_of_ref": "indicator--83dcf4d6-d5f6-45fc-aba0-08e7e62dc582", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a22498-82c9-4dc3-aa78-a2839737b8b0", "sighting_of_ref": "indicator--f0bfd5dd-1069-468b-a607-ab0822ad4ca3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eade7c4-f42a-43f1-a9db-a9fcb3d348d3", "sighting_of_ref": "indicator--7050903f-b57b-423c-bb87-6b3d52cf6a1a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0b496c-c439-446f-a72d-4a8db39327da", "sighting_of_ref": "indicator--ee27222f-e389-4ed3-aedb-67591229ab84", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253296ab-fe61-4826-9b8b-ef6afa05f3d6", "sighting_of_ref": "indicator--1812ed85-1f81-49ea-961f-4ba2fe5a6c89", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f26351d-d8cd-466d-b6a2-7c4491f608f5", "sighting_of_ref": "indicator--8330642b-4517-4a3e-937e-3a292d4a6d15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efbab7f-735d-441a-8f22-7d10cfc7ed98", "sighting_of_ref": "indicator--ce281aad-74c1-48ad-ae56-26c07eaef073", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bdd82d-c676-467a-8eff-30f4b9bd311e", "sighting_of_ref": "indicator--8a5bcaa3-dc4a-4fda-bcb5-71d501103f5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fe212f-70a0-42fe-9b26-680c1e94e879", "sighting_of_ref": "indicator--0c4e84b3-cb8f-46cb-9ada-170b1eaa39f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b82de29-c512-47a7-b21e-d440c7bad2e3", "sighting_of_ref": "indicator--e65e003d-98e6-4a3d-9c69-2c2ef93e7321", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1315446-6ab9-445f-8d5b-703ca62b65d5", "sighting_of_ref": "indicator--4a6df0ef-42ab-47a3-afee-999b69e52799", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c98d0d-ea40-4488-9698-845b126b9c39", "sighting_of_ref": "indicator--c47c9fea-09b3-40d5-878f-60b3c2b81681", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313bef78-0ef3-41a7-a290-6bc0b42f82b9", "sighting_of_ref": "indicator--c4eb07c0-e1dd-4637-af0e-382dd4e7dc3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa3d69b-87a9-40e6-9ac2-1eee5bb25f20", "sighting_of_ref": "indicator--c78e8d82-85c4-4d35-8c5f-fa45bed2cd28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5a9e7c-7a01-4366-a939-18e7eca1b596", "sighting_of_ref": "indicator--d4ffe17d-f113-4268-8c4b-f233b3472810", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ab5dd6-9c63-42d4-8ad9-4678294ddb21", "sighting_of_ref": "indicator--bc54da3a-44ee-4214-bee8-0e9d1438f804", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831aa7e2-7a1c-4afa-b0dc-dd76c06ab7d2", "sighting_of_ref": "indicator--62e90333-aeeb-44bd-81f9-5d7a4bc01334", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd182990-c695-46df-80aa-238344a55541", "sighting_of_ref": "indicator--315ced7c-cd4c-45b9-87bb-4ee9379f528f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e588b66a-d460-4499-8c83-ccbbc8c40c57", "sighting_of_ref": "indicator--d134bc69-3693-406f-8b50-4038880699bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b8685f-392e-44d3-a6d9-cfe7d4c73acc", "sighting_of_ref": "indicator--cc1d4441-59c6-4c07-b482-aadbf6be9e87", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf7b7d9-91f2-42b5-bee1-416f3f59a4d0", "sighting_of_ref": "indicator--5539f97f-0226-4c08-9cb2-38fd6914c974", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70bd10a-957c-4b09-a3af-d09f50355e31", "sighting_of_ref": "indicator--d7822e8b-cbe1-4ef4-a78e-1e5ba7b03088", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e52be-12b2-4d64-9380-dd5d2dc9dec7", "sighting_of_ref": "indicator--a3bc6ec3-286f-4e22-bdfd-4de2df089a97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d28cf43-ef62-4acd-9a7e-b0a3bfb940ce", "sighting_of_ref": "indicator--6280d8b5-45e8-4632-8c36-0355f0113883", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2ca86a-b4a8-4c83-a776-5c113ed98404", "sighting_of_ref": "indicator--208bb677-69a3-4103-b3f9-0ea49151651f", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4907f-24df-49fd-89eb-71e28c0eaff3", "sighting_of_ref": "indicator--010881ca-2425-49f3-a21c-9a2324c57177", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09610cc-d78e-41b4-b5c3-91d51bd26965", "sighting_of_ref": "indicator--2be5c3d0-ff8f-4c2e-8742-d726aaa08854", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c74ee3a-10dc-411d-aacd-68e5264dd1dc", "sighting_of_ref": "indicator--9d878634-a806-4b82-9f34-788dda6686cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53d3ca2-c163-4da0-aa76-18522bea94e2", "sighting_of_ref": "indicator--678ef402-157f-4d0f-91e2-01b502ab1e47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b104c286-4e12-4338-82a1-e97315d81fa8", "sighting_of_ref": "indicator--49b4beb6-9285-4910-82df-600ff1254c2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f01d71-cd2f-4148-822a-e048ca6ba611", "sighting_of_ref": "indicator--fca9828e-a648-42f3-842a-b40fb2d0decd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddc5d88-46b0-47b9-94c7-e8de753c4c23", "sighting_of_ref": "indicator--a924bd43-8a0b-44c6-9a53-173870259804", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e855b08-0d89-4eea-9354-2a516ed94934", "sighting_of_ref": "indicator--a8592b45-c77b-4d25-a9d8-98722d90422e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30996d89-a88c-47aa-8f64-6cf0a503cfc5", "sighting_of_ref": "indicator--202e2e0d-ff8f-4998-af91-e1d8c3b79979", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4a255c-f175-4992-a858-3b6b0192dc4f", "sighting_of_ref": "indicator--582695fc-6165-411c-b77a-a710d4885652", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340e990e-3bc3-43b4-a0e8-5bbee2d34356", "sighting_of_ref": "indicator--3dba8aa3-6df9-4358-9270-ba2bea75a750", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d33f4-a376-471a-a3d1-61ed13f4f565", "sighting_of_ref": "indicator--19d30600-d47a-429b-993a-d3997d8b266e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac0ac90-823c-40d2-b50c-524411dc7f5e", "sighting_of_ref": "indicator--cf609882-b756-4d12-996c-4ce7e0c30a22", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b14a38f-ed39-4519-8e61-0b36f96816c1", "sighting_of_ref": "indicator--35541aa1-e4b5-46db-abb9-78e9a1a901db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e3bdb-d8a1-4df4-9984-90798eb0cc18", "sighting_of_ref": "indicator--bed1895b-6d6c-41ef-9dc2-c3ac70b0baa8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992cb992-6db0-46fc-a131-78e64f146436", "sighting_of_ref": "indicator--196921e8-59e1-4080-85e8-e70b3b9ae1a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c305cfe4-409f-473c-88bb-5b78725df5ae", "sighting_of_ref": "indicator--9647a810-33a7-457f-99ec-e17b2cb86f6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a13291-9020-4b7b-a540-a3040338c349", "sighting_of_ref": "indicator--487685b0-74f5-459a-a818-a7c9a9f8276f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b172dad-09f4-4ccd-ab04-f164632538b2", "sighting_of_ref": "indicator--9504d977-198d-4cb0-b34f-e358721d0795", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ac1d94-0f8d-49d2-9751-7dc7361d5379", "sighting_of_ref": "indicator--be0309f4-68e3-43a2-aaeb-3e45e053b75b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcedcdec-fd33-4b24-bc01-73f11e56ea65", "sighting_of_ref": "indicator--8803e15b-ca9d-4575-8500-fe5ef2992b1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd65132-2154-4d9f-984e-d2b88381e1b3", "sighting_of_ref": "indicator--669f4a1f-2c74-441b-a354-46c2c894c8a5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b9556b-369a-4950-bf0d-661a3f59f3c6", "sighting_of_ref": "indicator--0221c8a6-b44e-43f7-945d-5e94668b8736", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910138f3-216b-4e22-a55a-010772000528", "sighting_of_ref": "indicator--4de9c9f0-02c3-4e95-860e-74af656a8c11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9b289e-ae82-4bc4-9a35-6223975da293", "sighting_of_ref": "indicator--5213649c-8e18-4e2b-ad68-62234677920f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe150e5-8ccb-482d-8b11-b22a366d144f", "sighting_of_ref": "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d9e1e8-07d3-4b9b-b3e2-55d746821dce", "sighting_of_ref": "indicator--3b84083f-afa5-4bd1-9f1a-4de24944ec9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883359cd-e9f9-4cad-bd44-b4b30eca1718", "sighting_of_ref": "indicator--f6a73504-fa01-479d-ba3b-bb9272155f3d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0be7cc-41f0-407c-a0b6-84c8b0bf6ed8", "sighting_of_ref": "indicator--e10a6f7c-4025-4369-8d48-3ec18a3b55fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aeb1b6-aa92-4315-8f15-542f7399b4b3", "sighting_of_ref": "indicator--fa5fdc92-1464-4979-8691-bebad0a16629", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dda8ebf-3209-43de-9866-d58872ed5070", "sighting_of_ref": "indicator--e8db27ba-64c7-4641-b761-5af032e4251b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa16ba5-eed1-456b-8f40-367570b35c89", "sighting_of_ref": "indicator--37dcf584-bb4b-4a55-a161-33b9cf4c07a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbd95b0-ab8b-4f98-9ecb-e016608425f4", "sighting_of_ref": "indicator--7b879134-7fa2-49e6-8c2d-7617f5a4bb19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fab60d-857d-4b69-b3ce-e91a9846eca8", "sighting_of_ref": "indicator--d1f128d3-f558-4140-9169-eb0f1d82577e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c055ab9f-2ffa-4531-a274-a5c2433c6a2f", "sighting_of_ref": "indicator--f5b889e5-a74b-4b0a-843c-db26846673dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567a48f9-3ec1-4f50-b78a-21081848d6b0", "sighting_of_ref": "indicator--a5e92986-c69c-44c6-a3b3-e1f5e78bf5d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9723e88-a381-45ac-8986-417afda6355a", "sighting_of_ref": "indicator--04176b8c-79f5-40b0-9732-f2d78a307551", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebe900a-b982-4a30-9435-ae7c72fdc601", "sighting_of_ref": "indicator--49161c2d-100e-43d2-bf84-0c90fb842b69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c156737-134a-4fa7-b5bc-483fc8b4de1f", "sighting_of_ref": "indicator--0667b43f-d26f-45a9-a983-3aafdf0f220c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40766e0-9b3f-4565-9f77-89fcec870486", "sighting_of_ref": "indicator--6f89f595-14c6-401d-857b-36066eea79b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d2fed5-f64e-4097-90f6-baf0ff5894f5", "sighting_of_ref": "indicator--05980101-4a51-4336-aadf-cd8565dcfa23", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668adae8-14a9-4218-ad4e-ed07a1e9c5c8", "sighting_of_ref": "indicator--7a273774-e0c7-4996-ba56-436af8af9576", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eddf73-447d-4b43-aa18-48bfb399b41a", "sighting_of_ref": "indicator--98631b25-a713-4fe5-a312-ea58a41a6568", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5412e710-8986-4fa6-8643-fff4fcebe90f", "sighting_of_ref": "indicator--d4e468b3-424f-43d2-ae5b-11bf5f19c702", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3c74c1-f495-4bd1-a0b4-81993ef7eeb6", "sighting_of_ref": "indicator--c87fa3ba-9888-4afc-8dc6-f30e7413edf9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91264423-c376-422c-8a5f-df897530f200", "sighting_of_ref": "indicator--74a03534-a16c-4f85-ab13-51ccb0c1a0f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60a2c0c-293d-471b-a594-dc25f4502511", "sighting_of_ref": "indicator--6584706e-e004-4be8-9510-4f34cdb1d5d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340d5712-ece2-4b2b-ba7a-c7d9d317bf9e", "sighting_of_ref": "indicator--2892a737-2e9b-4dca-b1f8-61739d9fda33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1009893-3f32-4df7-847d-27226c7e6a93", "sighting_of_ref": "indicator--7d3c7c0c-293e-4781-b716-5483f3cb5b4b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c173b599-3a53-4928-9ce9-c82e2df512bd", "sighting_of_ref": "indicator--77b68c35-0edd-4c45-9ba2-cd8eec37986f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ac00e2-0178-4711-b169-4fc846f66fe4", "sighting_of_ref": "indicator--7f8d6ae0-5f54-42b5-973c-2d48c70e3069", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5b2d78-65e8-4ed3-a627-e942682dc43d", "sighting_of_ref": "indicator--ab27e778-ee1f-4a51-aaad-9724c3ad3974", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6fdc06-d4b5-4f03-b6e6-7cd67676df46", "sighting_of_ref": "indicator--ecca264a-f5e3-4ba7-b876-b85f9e36becc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cf6b0e-842c-4712-a201-46935bb58eb8", "sighting_of_ref": "indicator--b3eae4a2-d806-45a0-a2ee-6cd26d1868f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25eb758-f0cf-4fcc-a007-741791d9fef7", "sighting_of_ref": "indicator--9281292b-3b52-4930-b945-98fcaf287ca9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eddbcde-4c48-415b-b4ad-875e8be72452", "sighting_of_ref": "indicator--7a567d09-b216-4375-820b-2e918ba0a5e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786975f8-aace-421c-92b9-25fc9b259ba0", "sighting_of_ref": "indicator--e1603874-dd3d-4286-9f4b-f6d154d8a2dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5aa46c-2bee-4dfe-ac6d-34531e9b250d", "sighting_of_ref": "indicator--74708f0a-438a-4fc0-b526-1165d3783a1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118d8adf-d272-434f-be7d-afc9f4767fac", "sighting_of_ref": "indicator--c09bae2a-d299-46ec-9d00-dd54b11f2789", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a98e307-cdec-410b-99e1-b40ddee81f80", "sighting_of_ref": "indicator--f111a705-b611-4f44-b81c-5960304c7a28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692f013f-0b68-4b78-b39a-5c5c55a28485", "sighting_of_ref": "indicator--e85e3782-f392-4a7e-9f0d-11d8b04f0c22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8127c1ec-dcf5-4483-b31c-41151941498b", "sighting_of_ref": "indicator--11b814b7-d812-43fd-a5fd-01a51fcd7051", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8329abc-c21d-4498-91ee-c66a248f51e3", "sighting_of_ref": "indicator--c06261fc-fded-4983-a7e2-53b7cc3207d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a900360-dd6c-40ba-8d79-7f4dd904bb30", "sighting_of_ref": "indicator--b23027b0-19fb-4b24-8ce5-ba109a94f8e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb13351-90cf-4590-86de-93eb7dc699d3", "sighting_of_ref": "indicator--f8c655a7-c70e-4ee0-ab5b-6b992d0cde15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9b973b-2652-4c07-949d-daecf8567e4a", "sighting_of_ref": "indicator--e9823dd7-682b-4472-a9ff-57c267162b7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf26a97a-c027-4538-b505-38298428a151", "sighting_of_ref": "indicator--7e8e13d0-f6e7-4811-af9e-f16144e9aa5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d5ad93-b6c8-4d24-a53b-a69388c27eca", "sighting_of_ref": "indicator--a4c58e2f-9368-47fb-ae1a-b19917154f2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0465bf-54ca-4088-9d45-94478d0c8c96", "sighting_of_ref": "indicator--9ce1f39c-eab4-4d80-957f-3cd55f679eb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e59449-57e2-49ee-b7f5-2f54f1811db0", "sighting_of_ref": "indicator--6a72e937-e2ab-49bc-ab25-db5c07a54656", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4052a6-1e0e-45e9-9021-e85b17577b1d", "sighting_of_ref": "indicator--4c45e828-789f-4efc-ac16-c94da51c78c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148605d2-2e27-4808-bb4d-b9fcf59c9a18", "sighting_of_ref": "indicator--a2d304f8-3436-4615-ad9f-be2bcf4c87aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfae47e-549d-466c-aab8-a23895bd5b00", "sighting_of_ref": "indicator--83fee863-a57e-4485-a612-4f029ef768ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ac5857-50e4-48d2-bbde-8dd51132293b", "sighting_of_ref": "indicator--a61d3638-b473-4942-8298-a0af3851a7a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c090ea4-6294-4ef4-a0e5-0ffb5d95dcc5", "sighting_of_ref": "indicator--0790fe61-8e1b-4063-a9f5-07ffe190ef47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bc92c9-de8a-49d4-bc0a-aae3b4e7db3e", "sighting_of_ref": "indicator--6b2a2468-57ec-48ae-9e4d-1a39ef808e49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f258bf36-30ba-4c18-b8f8-e33424a32cb6", "sighting_of_ref": "indicator--6f04d4de-5404-4fbf-990f-0ee6129771b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d542b25c-c948-45c6-a6f3-ae827291d0e8", "sighting_of_ref": "indicator--48cf371c-c878-4ced-b5e3-0b857fc84687", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8aca63-97b7-45b6-badc-4e56f35d5791", "sighting_of_ref": "indicator--338ace59-0ef8-4b67-8492-17026ebc63e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2061d014-c18c-4e5b-9766-dac1cfea89e2", "sighting_of_ref": "indicator--507d7c20-3da3-41db-8ec5-a6d9b314efd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273ce4e6-180f-45fa-a98e-e62ee3904ccb", "sighting_of_ref": "indicator--1e65d908-466c-477f-adfb-412ae5d1ad52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d409b3-1f62-4288-84f1-f60ccee769bb", "sighting_of_ref": "indicator--0d7a9dbf-6431-4f1d-9252-8c263e7f55da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15729598-abfe-4b9e-8c12-9290f1ee162d", "sighting_of_ref": "indicator--f7bb6416-1495-47a7-98c1-5ceb234caf1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf98382-33e1-4cc1-a562-6cc533e5eda0", "sighting_of_ref": "indicator--a741cf54-ef6f-4682-b230-c41e8e0000cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453d3797-422e-4a37-8024-1dc214fdc4e2", "sighting_of_ref": "indicator--c090b5ea-7c93-47bd-90f4-c98e0e67a93e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307c5c79-b856-4ca8-8dd7-f889507ab086", "sighting_of_ref": "indicator--13d52680-345f-4162-90d7-05a937c58397", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546b9442-6608-4a89-aba4-f78cf8088260", "sighting_of_ref": "indicator--bf06e2f3-473b-4fb0-969a-4d475b265c24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe9b72-e9b6-47b8-8748-8e3cb64e7f81", "sighting_of_ref": "indicator--93d0a230-1071-4639-8578-48e14664c712", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70b4280-9fe4-48f0-a586-c5dc2879e0b8", "sighting_of_ref": "indicator--98341a94-7286-498b-a994-09da015ddca7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c09957b-c2eb-4376-9dee-fff4b3edf395", "sighting_of_ref": "indicator--250cfd9c-39c4-4195-90e1-1de9034768ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df6a32e-3784-4895-8a33-88278da9634e", "sighting_of_ref": "indicator--b9cf95d4-a60f-4854-ba6b-23e62d441e47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafaa753-7deb-4ffe-aba2-bfc6837b2271", "sighting_of_ref": "indicator--ed4ea797-5be0-408b-89d7-b3dbe23e434c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a741f943-8146-4127-9808-796adf3603ee", "sighting_of_ref": "indicator--7957a78f-8525-4852-8b35-e8a06a996ef4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3121efff-bd90-4712-9bd0-55d9effd3689", "sighting_of_ref": "indicator--187e0778-8358-4779-a082-245bcee09a67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c23354b-a518-42bf-b6cf-232adc2c2c34", "sighting_of_ref": "indicator--88da2e59-51bd-4693-9802-fc15c6af2c3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b8484c-e563-485e-8270-71681fec6951", "sighting_of_ref": "indicator--7c728b2c-b3f2-44ef-b906-e707f5e076e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b44ad41-15e1-4665-aef8-c9c4973bee19", "sighting_of_ref": "indicator--f6f36113-01ca-43d1-b41c-54ba519156c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b040cd-a735-4511-92b4-0728f01c9f93", "sighting_of_ref": "indicator--0b3b7772-b3f3-41a0-83de-c57ed587be8f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25721a5a-3ba2-4f0b-8e34-f257f3e8feab", "sighting_of_ref": "indicator--1c9e9ae2-0d69-4b45-8e3e-444610f833a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095eb4e8-0a4c-402e-8546-af458bf4fab4", "sighting_of_ref": "indicator--ae101c3a-53e6-4414-aa07-0fd75fa9e261", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a4b275-e47c-498c-b990-e455f9bcadf2", "sighting_of_ref": "indicator--6c87b743-b919-414c-8afd-b98241633e41", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b23b036-fdd0-4d24-8a17-0ddf0ed4b4df", "sighting_of_ref": "indicator--1af9843d-5d02-4b15-a1ea-cd273354ffe5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126aaa5c-9f44-4d2a-84ac-8f446d687043", "sighting_of_ref": "indicator--7d82d1c3-3742-4c15-a8a9-cf1851443aa7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628ae696-a7dc-4e86-8da0-71626a18a256", "sighting_of_ref": "indicator--3d7f2a46-f159-4fa0-b900-e557a15c1628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e902120f-0206-4905-ada3-392f5b8ca4ea", "sighting_of_ref": "indicator--72c123b4-9c1c-41dd-a000-6f7cba2991e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e56db20-75ba-489f-a2c2-a3d42147b54b", "sighting_of_ref": "indicator--eeda3e36-b977-481e-b883-b5da25d1adef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cfb1ba-ae62-42b6-af4a-b60c1e9145b4", "sighting_of_ref": "indicator--89a24cdc-f07c-4531-b00b-ef574a73a841", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363804b9-ec6b-4586-a663-4db37c5be9ac", "sighting_of_ref": "indicator--cdce317e-7cea-47e4-ad31-fb97e5227a1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03058dc4-7514-4fe5-a735-afa49a8735a4", "sighting_of_ref": "indicator--1bc4132d-3aed-43e5-ac36-4127b73142d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce631aca-66f1-4a3b-91d1-9808b4685876", "sighting_of_ref": "indicator--65bd805a-61de-43dc-8106-230712bd91c0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbc01b9-697b-4a16-a38c-6adcfb1dd54a", "sighting_of_ref": "indicator--9816610c-4dfc-439f-a2ff-f94f37eda38f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a521b8d-c7a3-415d-8183-e3521c8225e6", "sighting_of_ref": "indicator--3a81888d-967e-4ad6-bdcd-288cc59350ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc49b4fa-8919-4874-b4de-ca4e5506f8ad", "sighting_of_ref": "indicator--ccf08b63-6b9f-414d-99ee-72de37afc8f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83f9c1e-98b0-4b72-8aa8-07b368d8e9d0", "sighting_of_ref": "indicator--f7676d76-27c3-4176-86a6-d8f03a40fca6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71325c4b-1993-4878-87d2-6b5a75066672", "sighting_of_ref": "indicator--0e350c9b-2241-4f0e-b204-1299c3e12d7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c0c46d-1d4d-4890-93e5-d366ccc77622", "sighting_of_ref": "indicator--9dc58daf-33f6-4be5-a862-c771e50602c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62f58db-e1ca-48fb-8327-d06de89cdfab", "sighting_of_ref": "indicator--87a903dc-cfa5-4b39-9eb4-16269fa2617c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3193193-cdec-4678-a038-685012101212", "sighting_of_ref": "indicator--b4199bed-3425-4115-8567-8008de50ab2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f824f5eb-8f6f-4850-bfc9-0d91cb678930", "sighting_of_ref": "indicator--ae268234-a58e-4dae-aacd-34b7c9607424", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33df399-2029-49f3-b637-0c321945a32f", "sighting_of_ref": "indicator--ad60f6e0-3e4c-407a-bccf-d819b3857016", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aeff74-80b3-461a-9d76-4a3f44819454", "sighting_of_ref": "indicator--6a5df4fd-240b-4cf4-9b6a-d94708a95b45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98de6382-6c1a-48c3-ae6b-83246c04e12f", "sighting_of_ref": "indicator--9060f2df-7ef0-4fdc-b2b2-7192cac36244", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a84266-8322-42a0-b62b-5dd7a3a3738e", "sighting_of_ref": "indicator--06f37efa-86a9-40f1-bf91-1ef72bb3dfa4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2fcbc6-3925-4cef-81e0-ce4e851fc9a5", "sighting_of_ref": "indicator--646fa8f0-8d25-457e-84c4-9bc6047a91ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6457c7b5-944b-452a-b5ac-fe738449f984", "sighting_of_ref": "indicator--cddbf694-9a29-4020-9337-7168126da715", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094e4c8a-6f5c-48ed-9c58-d65d42d8d903", "sighting_of_ref": "indicator--cd9b6f99-b868-4d0f-a87a-c7031c784d80", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16950c82-5d03-486c-b459-2c22eb27211b", "sighting_of_ref": "indicator--e00aa5b6-c0c3-47aa-bdca-78d8b0e5849e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04665da-58ae-44b2-a6c9-59c7e9df4215", "sighting_of_ref": "indicator--5373b466-f5b7-4206-88a4-65d4e7491ad5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d1d3b9-ad1a-4803-858d-34eaa540e65c", "sighting_of_ref": "indicator--57b0bde0-aff3-4e9e-845c-d4dd34cfbe15", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fcb8ce-5d4b-4f5f-8696-8f25b923a4e3", "sighting_of_ref": "indicator--ad6bdf6e-71d3-4681-98e5-f79ff663ffa9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afadaae-6351-4de1-9398-6f850b8d1c8b", "sighting_of_ref": "indicator--d7685977-c381-4a11-8020-630fd5fbc596", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d4b437-63dd-4670-9c49-7bbc268ed4a7", "sighting_of_ref": "indicator--1ba03831-aa0c-44ce-a74b-654cf4e03a3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6bf5a9-335f-40a4-9260-f8bcc8ffb805", "sighting_of_ref": "indicator--5c33dc5d-3856-4300-bea5-35cddd96512b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95d8528-a27e-48b6-9e63-344343313527", "sighting_of_ref": "indicator--8e17af71-d5d2-4c2a-8f48-1c6f5a12b192", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fd07f5-21e3-47f3-84f9-66f40fd13644", "sighting_of_ref": "indicator--4e690286-9241-4a78-aefe-da0dfa850c92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfce291-e74e-4c8c-9aae-24a79f17fd80", "sighting_of_ref": "indicator--2f04b578-cf07-4064-8887-6671366a0bb8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde0cfa4-378c-4e04-a6c3-32bf8313a3a1", "sighting_of_ref": "indicator--780b2a7d-7235-4a18-9e4b-5a85af7c7ae3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1525185c-fc0c-4fe8-b98b-445f455bc317", "sighting_of_ref": "indicator--1b4edae4-89a5-455c-a16f-ff73d9c8fc03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d859dc-b727-4b98-a3e3-b0117a0130bf", "sighting_of_ref": "indicator--f9b4b043-2793-4748-a626-1585ea0565b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d773258-641f-4366-864f-a91e2ab3ff60", "sighting_of_ref": "indicator--575437f4-38a7-4bbc-be1b-9d7acb70795c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63ca07a-ed8a-4ef8-8144-12c163309bf1", "sighting_of_ref": "indicator--dc679c16-cb73-42e1-b5c5-5e5064cfeda9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6fde39-1ff1-42d9-b87b-48a1047f820c", "sighting_of_ref": "indicator--d762072e-4fc6-483a-9933-36857b343162", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66c7637-4356-47b6-bc51-d12f9dfac44c", "sighting_of_ref": "indicator--cb0f93dc-ac68-4509-8e7c-cf08b613fca1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a2b15-f160-4431-b905-08d7e0c33dce", "sighting_of_ref": "indicator--3184aca0-2ff6-4250-8619-569791cdf795", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db8d54-5bc8-4cec-9f86-2d09f8f44442", "sighting_of_ref": "indicator--a9d3e328-f464-46ed-a10a-c62649b74178", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77b5853-d33c-48f4-9e29-37df25bb0355", "sighting_of_ref": "indicator--2b068f14-2787-419f-9a53-a35680364357", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec6dd76-5d05-47e4-8fff-3a6309235c5f", "sighting_of_ref": "indicator--4e679eeb-b5aa-437d-9f3f-fc79f836db21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103fe0a4-cab0-4a2d-adb0-4fd8c860b5f3", "sighting_of_ref": "indicator--0fbdda07-161c-4be2-99e9-7a5b17a35309", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b325a5d9-abdc-46a6-ac0d-0349f9add881", "sighting_of_ref": "indicator--9c118ba9-6f58-438c-9b28-ab1af736f9e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbae323-9bb5-4345-815c-e9c4156427c1", "sighting_of_ref": "indicator--a022e9d7-8aec-4a5b-b402-8a97a81b8698", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0170a62-9b49-478a-bb32-b0ecc64ce8ca", "sighting_of_ref": "indicator--e0fa9d3f-fa61-45db-bf5d-5d030df7533b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5a3ef2-9346-4a64-98e9-fb4efeb4f4a0", "sighting_of_ref": "indicator--85ba4589-e410-44d0-9490-a901e6a91a20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9bde43-729a-4e37-9835-56839364ee60", "sighting_of_ref": "indicator--72138f73-6723-4275-b633-195723d4d45e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e80b06b-613d-4c06-90f5-09673c63770f", "sighting_of_ref": "indicator--ac32f8aa-fa42-43c5-8477-514e4c6a3dee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de08194-fbce-463d-8961-7c9caf722fa5", "sighting_of_ref": "indicator--19a81c41-9aed-4d2a-a183-5593c6cadce3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34a6779-9cdf-439a-a598-382899e5cbc3", "sighting_of_ref": "indicator--4a604921-1123-43ad-81ee-cf1566312726", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b84249-84d4-4321-a920-46ff2be6e3be", "sighting_of_ref": "indicator--53afa5cd-0779-4d61-9894-eb9d22ca1558", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0348fca1-49d5-4844-896a-4752375736e6", "sighting_of_ref": "indicator--a3832e0d-baeb-4629-b0f6-4b5ed6f0a29b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7bc4a5-0a56-45c1-9015-c1732d12b426", "sighting_of_ref": "indicator--e7c9806a-8d09-48ec-ad5e-a5c7e1a3e230", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497286d4-a038-45e8-918c-fa2daab3070c", "sighting_of_ref": "indicator--90471f55-88e5-4d48-9931-125a2492f570", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506937ac-bf54-4943-882d-f498e63c2643", "sighting_of_ref": "indicator--3a9353b7-fb25-4e0f-add8-0806a6326e74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff6e990-9977-4573-9f78-329c1b42c34c", "sighting_of_ref": "indicator--ef9c424b-b3b2-41e4-93a3-53b801c5da82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b50f98-b21d-4d18-bff7-4c07d1ca3e96", "sighting_of_ref": "indicator--f98c4472-3807-4849-ab14-aa4185e4961f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4402a3-1a99-4e29-b1aa-26984439a992", "sighting_of_ref": "indicator--dc725077-e6fa-4a5b-82e6-b280996862f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073e541a-b43c-4b43-9e03-ccb58e2b39e7", "sighting_of_ref": "indicator--94a3c8f4-9cab-42a2-a14e-e3040c92edc8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd98a822-e830-40f3-b5a9-76da3cb48177", "sighting_of_ref": "indicator--d4320320-eee7-45ff-9ab7-eb51301c1c0b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f3b1e7-3f92-4859-8438-588b9226d511", "sighting_of_ref": "indicator--74b53f09-521d-4262-aca3-0123a93221c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0653b931-f42b-4042-811c-5560de8e83f1", "sighting_of_ref": "indicator--5d11d2c9-8945-4d0b-8ac7-7cba66373368", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738bd16-2cb6-420d-b5b9-524fa8d8c7c7", "sighting_of_ref": "indicator--2d65cd8f-fd72-4b6a-850b-223982beccd9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aae7a2b-5fb8-4e74-80ba-d7fab46ede05", "sighting_of_ref": "indicator--6294d3d4-ccb3-4009-89e2-44f40eccc604", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac73d705-185a-48bb-8a24-359c7d456c22", "sighting_of_ref": "indicator--0f794f19-33c0-4c6c-9102-b8dfd78deea7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f31154f-5be0-4732-88ba-2db1f3b181a1", "sighting_of_ref": "indicator--45f131b7-fbda-4524-ac37-a05f40d2c7fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb15d0c-7ddc-41bb-a11a-ada88ae95cd2", "sighting_of_ref": "indicator--a5dd35be-64a3-49d6-a8fb-da9b9b708890", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424490dd-38e8-408a-a98b-b29739a26b0b", "sighting_of_ref": "indicator--a1919a95-d6f5-468b-beef-aa8c30f648d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d127057-d70e-4ad9-9509-b982df5e43dc", "sighting_of_ref": "indicator--f86b092e-d625-4461-a411-368d8985ee09", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26872b0f-74ce-43a3-b34d-d5255ca51a73", "sighting_of_ref": "indicator--72a71d5f-9204-42ec-ae42-bb6f86bd06e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fa8ae4-2237-4a1f-8ba7-b870d52c4bf0", "sighting_of_ref": "indicator--135e7067-9b71-4861-a365-117629afcafd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf60369-1987-45b5-82e6-575745e24865", "sighting_of_ref": "indicator--0b8f2e12-4221-4c86-aa0a-88f156a12a28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f1dec8-8cb1-444c-baa7-f62e116be4c1", "sighting_of_ref": "indicator--8c36fa57-6556-4a42-bb5d-90975ee23420", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aff88dd-8450-4735-96b8-28a89018bc40", "sighting_of_ref": "indicator--09c0be29-b9c2-4c2b-aa81-d6f341b73c7d", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6115c321-8889-43b0-801a-ce98f795a32e", "sighting_of_ref": "indicator--779328a6-d8e8-4e19-84e6-43e366028a10", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eab6acf-116a-4788-9304-eab98dd5b599", "sighting_of_ref": "indicator--ef86cbc7-4314-4a33-bb99-9278756678a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b95978-1dd2-401d-a815-da1ea92c861e", "sighting_of_ref": "indicator--212fdc8d-9003-4a09-a5d6-cee180b93e97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcce98f8-15f9-441b-a784-e570522b2175", "sighting_of_ref": "indicator--e9807569-cdab-4f90-b1b8-24b59c4833cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e088a8-f9d4-4ee3-a411-ff04fde7a803", "sighting_of_ref": "indicator--41280e4a-469b-4629-9727-d1bac481217f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104518d-391e-49f6-b8be-617c2b75a8b7", "sighting_of_ref": "indicator--f41ba925-cdb1-41de-852d-95d281bcf368", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7785da0-5b5a-4326-b182-0f415914e6f3", "sighting_of_ref": "indicator--2d3611a9-5575-4772-b562-415fdf2ad63d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5c30ef-02d4-4d2f-922e-ae6591a642db", "sighting_of_ref": "indicator--e60c0432-70e0-4a62-9b31-be38749a817b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c1ac0-9a5d-4831-8cf3-eb0e0a062ada", "sighting_of_ref": "indicator--51734148-dd60-4b86-8641-432e992f0cf3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05e965-a068-41a1-8a90-aebab2b3d3d3", "sighting_of_ref": "indicator--330d52a3-4004-4143-9075-baf42ae0b94f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15f53f9-1708-4739-ae06-29715de6622d", "sighting_of_ref": "indicator--ebac5a3f-c251-43ec-a76a-88da3cc1a97c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c96517b-9cd5-4580-80df-7e70ef643f02", "sighting_of_ref": "indicator--94777256-1ca7-4881-bece-9770599d5793", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87c2ec9-e407-49b5-a19c-d50935a8c8b5", "sighting_of_ref": "indicator--6c6baaa8-1ca2-40e1-ad8b-5ed9349bb8ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c84707-f19d-4945-9f6d-6c98f69a279e", "sighting_of_ref": "indicator--9eabb2f1-dbe0-475d-8597-0bf4c44254c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677202f9-44e7-47ef-a0eb-eb40999a4c3f", "sighting_of_ref": "indicator--0833fab8-df3d-4987-8d12-b3ed5ef1fb90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fce4c5e-a528-4451-ad64-b5fdbc793e4c", "sighting_of_ref": "indicator--ba472fb9-9eef-4880-98ef-e5f86eb660fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2eb7252-3dd4-41bc-9ffd-6e9c6327c6d9", "sighting_of_ref": "indicator--56807b0e-55b5-40f2-98c1-b72fbd08089d", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de318943-b49f-4484-9f01-1caba4fabe9e", "sighting_of_ref": "indicator--5b64ecd1-6f06-43e2-974a-7da899f24dc6", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec667c7-f8d4-4b10-ba01-5fd562d33744", "sighting_of_ref": "indicator--5d0b6040-de5d-43e4-93fd-b69327148f03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba6e29a-2c1f-4026-91c3-9ad3c846980c", "sighting_of_ref": "indicator--f0299159-6130-46ae-8c8d-1a200fa02ffb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873f7d04-688d-4a65-9ada-4937532e1cc1", "sighting_of_ref": "indicator--92cbfd99-29dc-448d-8162-0ddb307b7ce5", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9319473-3a4a-4430-bc4e-4a7ee56fc674", "sighting_of_ref": "indicator--8c25872a-d545-4ed2-ac1e-1db0271c7027", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb3a324-25ec-42cf-8637-3638ea58bd80", "sighting_of_ref": "indicator--fe488b61-3f66-4fb6-915a-8d910351eb7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42f90e4-8295-4940-bbf5-e5011a06bc71", "sighting_of_ref": "indicator--9e5abe68-a232-447d-ac9b-68380478bc2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152bd71a-e3ba-49a8-b2e3-46313ef8e20d", "sighting_of_ref": "indicator--cf370706-da9c-4bb2-bcb6-e591e1a2d08f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ec5d5c-86cf-43c1-b150-b1693a7799cf", "sighting_of_ref": "indicator--031b6c20-e28c-41d1-897c-ebe6c04ead91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dd855b-ea5d-44f0-9192-6ebcd0ce441f", "sighting_of_ref": "indicator--b0370643-c15d-4884-8881-b69818d95fba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f494399c-c472-4acd-a83e-37419f80d5a6", "sighting_of_ref": "indicator--b1b1405b-422c-47b9-b839-6383a3d9bc6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d46d486-d7cf-4aa0-968b-4f92ef3371d5", "sighting_of_ref": "indicator--66f40bd3-08c7-4d02-b812-2363961b6272", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655521a3-0599-4efa-b387-79251d7c2233", "sighting_of_ref": "indicator--8caee3e5-a1b3-4e40-aa1f-80c0d9dbdaf8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143ca4f9-b319-4f2e-9951-4c11bd5cb840", "sighting_of_ref": "indicator--d350ea9c-5bbf-418a-b066-ddec2ed14f01", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558790bc-94d7-4283-9691-746bffec6a06", "sighting_of_ref": "indicator--66b3071c-a09a-416c-9369-68dc0156ba9a", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281da651-2711-4f36-bdab-e23319bd2dce", "sighting_of_ref": "indicator--3f3b6af8-fd76-417e-b729-e983a7667296", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ee386e-4f57-4a3c-a6b7-1d75a134d0a3", "sighting_of_ref": "indicator--68c86759-17ab-48ff-bef2-a57c281ab2fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecea683f-1071-475f-bc97-073e6d6b1837", "sighting_of_ref": "indicator--ee0794ab-0af6-4241-89e1-66b1bc458fef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f301e8-939a-4e71-bbce-369815951b4e", "sighting_of_ref": "indicator--3897adc4-c224-477a-aef6-ebdbd367cad3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8b89de-17dd-40d8-bdba-0506a5a2e1c5", "sighting_of_ref": "indicator--7acf8414-bf26-49e6-9d4a-573a7f185cf1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a98b63f-5d51-438a-96d6-27848dceba67", "sighting_of_ref": "indicator--5edebde1-7002-4c18-8429-259ea4df5a03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18548a7-72f4-4b51-9244-f00b4f8bd0df", "sighting_of_ref": "indicator--c6de4a5d-19cd-4cfe-bf5c-3f17166e8d7c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a57536-d721-4ffc-a8b4-3311c1039869", "sighting_of_ref": "indicator--e61562ad-3d58-46db-ae78-db12b3738e4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a991bd-ad61-41c7-aebd-8972c9011a64", "sighting_of_ref": "indicator--bd52fb49-f420-48fd-8649-a6f8bd3a077f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e7a2e2-8af8-42e8-8d97-8ac63eb9f05c", "sighting_of_ref": "indicator--9367d2aa-175a-4ec5-bfa2-b4fc6b6a6d8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d2386a-f02c-47eb-8480-ede17ea9c77c", "sighting_of_ref": "indicator--b38f84dc-435d-431b-b6d2-9ccd155da6ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570e8d49-ee78-4aea-b08b-c04ab9589341", "sighting_of_ref": "indicator--8e87e9ff-df73-4204-98f5-7b8ed6718658", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f93be0-01ef-4701-ab34-5bd01197828d", "sighting_of_ref": "indicator--49c01586-2cef-4805-8f88-44c327349d71", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599b5782-2fa1-4ac8-8ed3-011128e82686", "sighting_of_ref": "indicator--194d8c77-6707-47ae-9e9c-6fe9c3bc4235", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6289ead-b2e9-4a7e-b933-f8db12927503", "sighting_of_ref": "indicator--9946cab4-c341-4a8b-81c0-8133d6947fdf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58823f60-fcd2-4672-a5b8-d0af320b5dec", "sighting_of_ref": "indicator--362a69d9-ec31-4425-96aa-7309d49cd1e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479604c6-5bdc-48e4-a860-2013b4cf1117", "sighting_of_ref": "indicator--37a873f5-666a-45da-bf7e-ed17f906a3a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfc5d19-e81d-4037-a473-c2d2c235bb9d", "sighting_of_ref": "indicator--e2ef4ff9-acf1-49ea-826e-629c61fc236c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8ef353-1a25-48f7-a449-1aa97684cd96", "sighting_of_ref": "indicator--757f5d4b-46d5-4c34-b33b-40ac40cd5667", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9640256-5603-4fd0-ad8c-b15546f14249", "sighting_of_ref": "indicator--d4075ff7-0a8b-4699-8a33-6e52202d0e72", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39628de9-591f-4b74-b051-f0ec54089500", "sighting_of_ref": "indicator--9e22fc94-d7a6-4eeb-947e-a78f4fb545d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccf6704-d5a8-49f4-ba84-a60dfeae607b", "sighting_of_ref": "indicator--3346e6df-024a-4e55-9e1e-0400b9b8b6ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ad4ff7-7e35-46bd-99fd-52c4af1d6703", "sighting_of_ref": "indicator--4cee0e1f-0661-4c7b-b7b5-40f9bbeff1c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda707bb-a398-44c0-91a2-3b406c43533c", "sighting_of_ref": "indicator--7cf1fd40-44d1-412d-ada4-2df3f8d49034", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe84075a-5633-42ed-b452-4aff6767b0d3", "sighting_of_ref": "indicator--9f4f2cb5-2435-4c9a-87bd-03f175dc5058", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85305d37-9638-459c-baa3-f8d643aac3e3", "sighting_of_ref": "indicator--1e874edd-2aaa-4e9c-bea1-4d9024c6caa1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4880c8-5728-4e30-ba5b-6a5914d0aa41", "sighting_of_ref": "indicator--dc69b3a1-00a8-419d-8042-4e0b26111333", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83cfa8d-bdf0-45df-aebe-0c4284927426", "sighting_of_ref": "indicator--1de1a32f-41be-40e6-87e7-d59646d40cb5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c125c32a-f357-4a4e-ac0b-f6a2049e69b0", "sighting_of_ref": "indicator--a6ec8b6a-b724-41ec-8cb4-596aebc64ed5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621ab31f-da4f-48c3-8867-abe9a7dbfb24", "sighting_of_ref": "indicator--e0592ea6-0961-4dfd-8c89-1bcb1979ed87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec43d0c-d4a0-4d6b-8f21-8045b0e69ee8", "sighting_of_ref": "indicator--30b20b59-eda4-477b-bfb9-acb19ec5c8cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d28ad2-2d5a-411d-8049-33cd9feda643", "sighting_of_ref": "indicator--8a4d8b86-2868-4155-83f1-4bdcc818c5c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa28ec24-05e7-4ee0-9c45-c10f23f06d33", "sighting_of_ref": "indicator--6cdcd1bc-c8dd-48c5-be44-c44f8f33bcd1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15faa985-5ce5-467a-a39b-203ad17342fd", "sighting_of_ref": "indicator--d1d2a678-936b-4bb7-8916-b9ec751b589b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f974773-46bc-4b14-8292-c97ff9cab7e6", "sighting_of_ref": "indicator--6a9d1d76-453a-4708-adaf-5895b147eacb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5f4a22-9403-4ac7-9b0f-901e93ee3b4d", "sighting_of_ref": "indicator--dccad5c4-6dd7-4403-a7f8-880b38f24a65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba0a99c-d110-409f-9746-30f84b66571a", "sighting_of_ref": "indicator--dbc9a61a-a140-4f74-9e09-7333f5b41e8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a2bd1a-23b7-4bec-a95b-5d0034b2be4a", "sighting_of_ref": "indicator--31a13629-cc1b-4478-bd2d-f77729e8f753", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979201d5-bacd-4f95-92a2-5af831b02299", "sighting_of_ref": "indicator--f3fe1be6-92d6-4bc5-a2dc-b64e4bd202df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7deace8e-0cfc-4588-8aac-f7908b00699a", "sighting_of_ref": "indicator--6c842989-50a1-46e6-9321-82755db583f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b896bf-760c-41dc-af53-57c764f237b8", "sighting_of_ref": "indicator--322a03e5-6224-4b8d-ba12-3c87b290d554", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c00995-cfce-4726-a7b8-376316746f1f", "sighting_of_ref": "indicator--94a6608e-cd9f-4c16-bdc9-062919772dad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a81cf5-8f06-4bc2-ac49-9bde35bbda42", "sighting_of_ref": "indicator--af477db7-6e24-4a23-8e60-e58db970c7ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de055dd-3a36-4fff-8b24-08304f0d7cae", "sighting_of_ref": "indicator--d4d88adb-ac6a-4ee9-b901-339f7fbaa914", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e10355-dbc2-431c-a157-38ecbcc44a5c", "sighting_of_ref": "indicator--badbb53a-e081-4ab4-b263-0187e5718b28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2a1039-9ca5-4b32-9e22-3e36dbdd3a8e", "sighting_of_ref": "indicator--f6efd213-fbf1-4a48-8890-639a53032aed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b243739-73f0-4244-b6f0-59ff126d8287", "sighting_of_ref": "indicator--ac9f8095-ba70-44de-b47a-c47c0656f4f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7119b4c9-d6f7-4b6e-93b4-523c7cdead7f", "sighting_of_ref": "indicator--ad1d22ec-ef17-4f85-89c2-549ed74eb32c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5390d95e-2224-429c-8edd-85e3b7c49f78", "sighting_of_ref": "indicator--b362ae71-ecd7-4f67-8074-9a3f024cb895", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c017a9-360d-403f-969a-0e5c4d55002a", "sighting_of_ref": "indicator--a09ebd81-4a9c-4ee9-a388-0d4de8b357e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a357ba90-9c85-425e-89e9-9518ab5c8133", "sighting_of_ref": "indicator--ffcbb700-d73c-4c88-a637-5a2d6731f8f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd856df3-ca3b-4cf7-851f-ad2cc6af31c7", "sighting_of_ref": "indicator--5b3f8e30-d405-4ce9-9e4b-f215ec4c3f8c", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8b669-53d5-4048-bfb0-00e1a7fa0ed1", "sighting_of_ref": "indicator--ade118df-d70b-417f-9841-0a7d49de94a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26b4109-7a21-40a0-b855-7fee771010d3", "sighting_of_ref": "indicator--097b2a36-17dd-44f7-a52d-017a13ffe480", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1870a7b6-95cd-43f8-8281-73f73df12e84", "sighting_of_ref": "indicator--6df77ec5-ccd7-41bc-97a8-6c134ad9677b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7aff0f1-0abf-420e-84ea-c107ed10e249", "sighting_of_ref": "indicator--7de39cd4-4959-40ee-a9da-276e7c209cfe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921c8535-9bab-48b2-b1bc-0dfb8299f147", "sighting_of_ref": "indicator--0b4153f0-ea88-467f-ad53-3f46644eb931", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f054e37a-a4d9-4a2f-875f-6dd0f68064bf", "sighting_of_ref": "indicator--f4684110-ca81-4752-ba49-fdaf86e4c9af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72907c87-aa70-44ea-9877-95ff5bd850ec", "sighting_of_ref": "indicator--5d63d6ed-6b5c-437a-aa31-0763018c50ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc5d10a-d1c4-41c3-84c5-8f3fe74b8023", "sighting_of_ref": "indicator--719ea0e4-e362-49a9-8b06-578092239f28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a4771-386b-48b2-a64d-529412536d62", "sighting_of_ref": "indicator--49e0e421-6fb8-4cb1-98a9-6a5de698f7fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4048bdf-2433-446c-9662-35d46faab35f", "sighting_of_ref": "indicator--a39e2e16-d6e5-4b3f-8cc0-19a214dc028b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fd9de-e922-4296-8052-b30c895d989e", "sighting_of_ref": "indicator--bc633d6e-1727-4d82-844d-ea0436410aad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4134aed-b5ef-45b1-bdf3-4fe2f1d80307", "sighting_of_ref": "indicator--340754eb-79f6-45e3-b8f1-f2d2c37c3e41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05ba7fb-2a79-4044-91e1-fc756d8ef40b", "sighting_of_ref": "indicator--f6f637fb-a21a-4856-b77b-537c09d165b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09de46d8-be60-4015-837b-360b25d836a4", "sighting_of_ref": "indicator--70fb451c-ef49-4e5a-88ee-aecc9b33e019", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c95f7fa-3f6f-4088-ade4-2402b0f6627e", "sighting_of_ref": "indicator--02d82ec0-f005-4538-86a6-a558c2bc333e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d70beb-56a0-4576-b09d-5f60a131c0b9", "sighting_of_ref": "indicator--080dfaf1-8ae5-4842-a46f-819a58201ea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9434988d-60bc-42b0-8699-16370dcf18f4", "sighting_of_ref": "indicator--7f8a6c69-31ed-4be9-be1b-42f42364cb28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9786135c-9304-423d-9f56-bcd4a77dde7b", "sighting_of_ref": "indicator--75dc5a83-69e6-4eab-9e4e-ece5ec6313e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0f3e5-92b2-4ebb-8e6d-0035eec8dd76", "sighting_of_ref": "indicator--774d9b39-156f-482b-abec-ee94831783bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba72a42-c2f3-4a9d-85a8-eeb9652dc7ab", "sighting_of_ref": "indicator--f2946605-ae9d-4ecf-9246-9866b2e3de75", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25aa4b09-4aac-4f84-8569-6f2c937ba985", "sighting_of_ref": "indicator--ca4f3235-20ed-4833-9780-8f28c74bc4fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aad692-c6ec-4881-8169-077f5fe4f177", "sighting_of_ref": "indicator--d732bb32-c1bc-4044-8f81-72a4d62dff78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bed2dd3-d9f5-44b1-a99e-72f658c489b5", "sighting_of_ref": "indicator--0ac975a9-f26e-4da6-97aa-a7e01635a5b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd01cdf2-ef28-44ad-8613-a0013fc36b52", "sighting_of_ref": "indicator--44e0c20f-020f-4f46-b1b7-14e4b2711862", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24944ff3-54ad-4118-91fa-30058b828974", "sighting_of_ref": "indicator--6c733a7b-2838-4d4c-88ef-7acee5920e2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35287d55-2675-479c-8031-c3b202edaf19", "sighting_of_ref": "indicator--ab2693f6-e66f-4209-b8f4-ed314d27208f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3f305c-70f8-4a6f-8a2c-0b21cd7c1966", "sighting_of_ref": "indicator--ec96cdbe-c7b8-4c59-89dd-a2078777ed4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b54230-76df-4a68-8a9c-3899b8ea2293", "sighting_of_ref": "indicator--5d2e5e13-dbc8-4933-84cc-51e383fad69e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22966dc8-8ee6-4bd8-987a-ee87aea2c2bd", "sighting_of_ref": "indicator--7257b4f8-a9f5-4121-b209-1e5727633f9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051f6625-01ba-4549-9c43-959afae5aa1e", "sighting_of_ref": "indicator--bc857554-2fe0-4318-897b-f69ac1ff4fc4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b4dcb0-1bf6-408a-bd24-a588ad2487b3", "sighting_of_ref": "indicator--b6b184dc-8a1d-43ed-aa2e-afdcfaa494f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a71fee-26c8-4279-b29b-bdf3fc1545b5", "sighting_of_ref": "indicator--ea4352ba-0855-4746-9269-05e086c1659a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f069361c-1870-43ed-aa14-4584f6115527", "sighting_of_ref": "indicator--caee85b2-3ef5-43e0-b518-d4230e52d839", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3111b89-d857-4bba-9973-b21fdcf507ff", "sighting_of_ref": "indicator--4f79fc1e-04bd-4a89-ab48-27a232a529fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fd12aa-6568-4c08-8f8d-a0b3866839bc", "sighting_of_ref": "indicator--53d21365-d9aa-4251-ada3-8cc8ce7c56f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdadfb8-15ab-46f8-a534-99a5f3529b4a", "sighting_of_ref": "indicator--932a3e07-c131-4ef8-8359-047f899a5689", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7c7c93-ec75-4c48-916f-24f2244a4013", "sighting_of_ref": "indicator--40681762-8b76-49a8-93f9-4e56409e03ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc503133-5667-4ba9-9ed1-7d28e0ea8f7a", "sighting_of_ref": "indicator--c7ea6291-c095-4a26-83da-b9f4d53650c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06781176-7c38-46d8-9274-d510e3495e54", "sighting_of_ref": "indicator--cb238832-f2c6-49b7-aa18-98f273c9b059", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2852df72-fa6a-4a1f-9782-bd341abcd787", "sighting_of_ref": "indicator--e385ce83-4c05-4519-9c1c-4598f8886331", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef08a0f9-9341-406a-98b9-844847f67fcb", "sighting_of_ref": "indicator--d4a98571-8074-46eb-b312-223510789cbe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa827d2c-d99d-4951-a729-115fd02c5cfe", "sighting_of_ref": "indicator--ca801a15-ce49-4d01-b3cf-8f592d79f694", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4970a8-2e26-4bf2-84ae-eb56f815532f", "sighting_of_ref": "indicator--c421c6c7-e03a-4617-abea-ddbdd34f4701", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec25e3fc-61be-45bf-b80b-a7aed750f13c", "sighting_of_ref": "indicator--cdfa009a-ddaf-47f0-95a6-64811fb7908b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b421fbd8-98bf-4eed-bc65-e91f1812ffad", "sighting_of_ref": "indicator--1271d76c-ab10-4a4c-a33c-77a1eef80604", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d161739f-c850-45da-9eca-8ffa86dad69f", "sighting_of_ref": "indicator--ba348495-d3dd-4081-a8b3-f1634a987c1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4157642b-8357-4025-9098-e0ac122d7b99", "sighting_of_ref": "indicator--cf07e5c9-af33-4a9d-9f57-e093b361ffa1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b0333e-8140-474b-bd84-ba72505ad048", "sighting_of_ref": "indicator--fd4c077b-31f9-4af4-ae53-6c87def51aef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897c8803-48b9-4734-a93f-73426a1ad322", "sighting_of_ref": "indicator--275b0473-1bdd-471e-bcf3-1d7eae8018c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86758436-c904-497d-a703-a43460fc94d0", "sighting_of_ref": "indicator--cbb7b2b8-e8aa-4405-9182-dfeaa310904e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee8887d-fb51-4d02-99ce-1ff41dca14bd", "sighting_of_ref": "indicator--0f2baaaa-9762-4375-8ef9-94fb088c35ce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b164060-b9da-4445-a877-befde2919669", "sighting_of_ref": "indicator--76524642-4aaf-4e61-8482-ddd7aaa9771e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1523cc38-fff7-4267-a181-a9ff9127653f", "sighting_of_ref": "indicator--22e62d6d-9dd7-42e1-930e-d5318e98d085", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7065c00d-7bf4-46da-b8c0-041a6eca01e3", "sighting_of_ref": "indicator--1429b045-7f4b-433a-8d79-e067cd758cf1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f26ff5-309f-4247-8c39-799e2585cc26", "sighting_of_ref": "indicator--159c57ca-4d6a-43c6-8c6c-240a24bf3ed8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8732255-ade5-4425-87a9-a1a697d13981", "sighting_of_ref": "indicator--9111d738-152c-4010-91a1-b81614b29811", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082be60-418b-4c33-875b-eb6776c8243d", "sighting_of_ref": "indicator--ce1152d9-c9e0-4f74-8333-777008a02d5c", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56aced4-7244-4a18-8f4d-dd0da9c9312b", "sighting_of_ref": "indicator--82f27d6e-a22a-4d0a-829e-8675f83fbcbd", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca84b7c-eec0-4489-b49e-e1f1ff03bf2c", "sighting_of_ref": "indicator--b4d09819-6f13-4a09-873b-1542f29de97b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99c7710-11d9-4757-86b5-cdcca44005f5", "sighting_of_ref": "indicator--afefbd82-3c15-498f-a9ed-e338ff338db1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75096d5-5d49-48b2-8ddd-27fa87b13460", "sighting_of_ref": "indicator--a5a2a4b7-d395-4ca4-8992-ffd96aa1f552", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d69ddae-d0bf-4575-93fa-dd37eedad4de", "sighting_of_ref": "indicator--f5bc8343-b125-48c4-b496-4033e6d96464", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88399c9a-32eb-4993-9234-e77803785e91", "sighting_of_ref": "indicator--86758d1f-e5b4-4546-9b8a-f9bf58c4103e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bfb0f5-c5f9-4ba1-876c-d725cba9eae8", "sighting_of_ref": "indicator--94d60d0f-8428-4695-8a4f-4b3b649e6747", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc26e10a-32c3-4764-ad1b-6d8327b28770", "sighting_of_ref": "indicator--ac998b35-46df-4b51-9efd-47a917d967cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa15e3d5-3630-4cbc-bb48-bf14597e5da8", "sighting_of_ref": "indicator--16a66c63-1806-48c6-b440-80ef521525cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf75738-9386-4471-8064-de048c74a3f7", "sighting_of_ref": "indicator--f6d039aa-11ec-4d45-bf47-549f8cf3cc1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27fa20d-9ab6-446f-ae9a-36ae3256e096", "sighting_of_ref": "indicator--73f97a62-09ed-40b6-8d4b-89580b8c52c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c090cb3-2094-4739-bd76-46979edd81fc", "sighting_of_ref": "indicator--c8ecc129-338c-4cf8-91e2-207f760bdbe2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff337cfb-9930-44c0-90b6-d1165caafa58", "sighting_of_ref": "indicator--a7ae6964-8d09-4311-9104-d17313aaf334", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f8b953-cae0-4aca-b704-c2aa689beacc", "sighting_of_ref": "indicator--76801e26-a20a-4bcc-a9ea-0e3f63fcc31d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77629227-d73b-4b0a-8b88-103c2c8da3c3", "sighting_of_ref": "indicator--32e8d180-4c1b-4eaf-bf36-6a242d9e0b34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481ec8d2-bc9a-4aa9-949d-db35018ebf83", "sighting_of_ref": "indicator--18c2c853-9434-41d2-a4d3-6691d45bc359", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d2bd1-30b8-48f2-9154-117d04834d3b", "sighting_of_ref": "indicator--ec84e5fb-15ff-438e-9e6b-9c72fa07528d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e328a-932d-4db4-80e2-09bc9945e481", "sighting_of_ref": "indicator--3c89449d-740d-4282-a1b9-d68e73b1a01a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415fd624-4ab7-4397-9bfd-6c0fe7fc1090", "sighting_of_ref": "indicator--6939aa17-1f30-4ee7-8df6-70bfbb0a7eb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54007c3-5c4c-4681-9ae2-2612731e60c2", "sighting_of_ref": "indicator--3c914e41-ecd8-4c89-8d9e-9ef9e82bb503", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fee67b3-f644-40b3-8c59-42342feda1e0", "sighting_of_ref": "indicator--fb2f5675-e06d-4aea-a991-bd050898280f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5930d42c-404c-490c-b9c7-a3ecf4a4b24a", "sighting_of_ref": "indicator--08cdad2d-d3a9-4d3c-b6a3-4a50e9aee099", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df03b5c-2745-43e7-b248-536b1311ecaf", "sighting_of_ref": "indicator--e7d4281a-4735-42b6-be1a-0ed8e9e4aa1a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877e12f8-1d9b-48ee-a347-a6a9ebf690b9", "sighting_of_ref": "indicator--c56e6039-b6a4-4e9f-bcda-f5592e2632df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2079e34-c8e3-4435-be98-28871dd72464", "sighting_of_ref": "indicator--1e3bd604-a6ef-461f-a26f-6e6679041488", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89243f2-4c89-408a-99bf-8f00f293f7cd", "sighting_of_ref": "indicator--63d512f4-3b6e-4f48-8e68-f86865d0dd5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4292e6e2-19ea-40ee-a9a5-9d3015badf06", "sighting_of_ref": "indicator--e53c4f63-0085-456b-832a-de7bb34c26f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c80e14-480c-4dc1-83ce-a49f65b66322", "sighting_of_ref": "indicator--fd88e2d1-5099-4fbd-901e-9b264aec88ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbbbab8-0f38-45ec-9ddb-2e0a45943d59", "sighting_of_ref": "indicator--16e0d70a-141e-4f76-b716-afd7b3dd252d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ed4f54-578b-4901-ba82-cf2dbeb2950e", "sighting_of_ref": "indicator--f43ae631-ab01-4724-983c-b34e8328866a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339aed8f-6d8a-4ccb-a441-9073552624c5", "sighting_of_ref": "indicator--4f1aa711-a894-4b25-a0cd-d2ae06c0dda3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb603811-ff1b-49a1-b16c-d119ab901f4c", "sighting_of_ref": "indicator--63bbc5d5-5c91-4486-b029-03522bd0abff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd088659-3238-41f6-b43f-9b6d017372db", "sighting_of_ref": "indicator--4b7a7e31-1b0e-41aa-9bac-7558f6710dc5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feeffdd1-656c-4985-9e29-f7fcf120544f", "sighting_of_ref": "indicator--d9082be6-b878-486f-9129-abcde056e89d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ecf785-c214-4357-af58-4053a484c445", "sighting_of_ref": "indicator--d9082be6-b878-486f-9129-abcde056e89d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ebe327-761a-43d8-92fa-fdeb90ec7add", "sighting_of_ref": "indicator--a146547c-9b0f-4003-ba1a-214cf6766297", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902ba7e3-428a-41c8-9abb-e05db42aa1f6", "sighting_of_ref": "indicator--c5ed30e3-a17e-4022-9bcb-c4223c46d300", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221e40c0-2899-4e10-89f8-249be746f7ea", "sighting_of_ref": "indicator--f14b6355-3400-4b6c-a636-494393f45fb2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912fc3e7-7c35-430f-bb46-b7dc8e1f55ca", "sighting_of_ref": "indicator--414cd64d-0649-4050-9893-8fc15e7873f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5538ebc-6f7f-40d8-9431-08dfa25b0769", "sighting_of_ref": "indicator--5ea808f8-7513-4cd7-87ff-04d2ce33902b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ff66de-948e-4068-a5b7-0eb90d31e041", "sighting_of_ref": "indicator--0cc3c4f2-4b17-4cf6-8060-3e5300755a88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761e177d-ad7c-42d9-ad2c-cac6ff6a925c", "sighting_of_ref": "indicator--15e96b6b-f083-427e-b4b8-dc4e50226145", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7740c44d-6e84-474c-8517-6c54224c477f", "sighting_of_ref": "indicator--9c10d63e-69b1-4d09-ba99-7fb87b956b90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e7581d-1262-481f-bedd-255f396aad63", "sighting_of_ref": "indicator--ae65be2a-0ba4-4733-ac54-93cee6ddc014", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6744a871-b6bb-458d-9d4d-ef5c787190a1", "sighting_of_ref": "indicator--7d8649ff-88fe-45a1-b844-5b35b772b5e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a48fe49-6fbe-40a6-8102-c5024159f3b9", "sighting_of_ref": "indicator--13fd6f8e-83f8-47b9-b65c-466dfed610ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4bc965-348d-415d-9932-b74b401afa7e", "sighting_of_ref": "indicator--4b779a63-a02b-43a3-9872-b19dc1097e6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1363cec3-829f-4740-92f3-51ef7d81c6b8", "sighting_of_ref": "indicator--3d42327d-9c85-4f3b-9691-abde682b86bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a641484-dfca-46c5-b5eb-3334b0794669", "sighting_of_ref": "indicator--3d42327d-9c85-4f3b-9691-abde682b86bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56011fa2-d442-4fda-b69d-251551b872b9", "sighting_of_ref": "indicator--f239bcce-98fc-4e3b-b8d4-ca5be5ed8ec7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e506bed-506a-4279-b58b-4f93c71e0158", "sighting_of_ref": "indicator--02445316-6cd8-4863-ae58-84bc5381c365", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567b9b04-5a6d-46a8-9a9e-ff6a6da442f4", "sighting_of_ref": "indicator--b465dfe3-9db3-4e18-87ef-7a819fbb4647", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee2abc8-f50d-4c8b-a891-ebc84bfb91be", "sighting_of_ref": "indicator--dde89b58-5225-45a6-8f2e-2757a15ca93b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7affb44e-b8d7-4f71-82ff-e3af261c9f7e", "sighting_of_ref": "indicator--a1b4179d-fae6-4b8a-ba8e-ebc779274e50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141edcb-cd74-4616-bca7-63309d7b4e49", "sighting_of_ref": "indicator--a1b4179d-fae6-4b8a-ba8e-ebc779274e50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fe67df-4e02-4ce2-996e-b02f08fc79f5", "sighting_of_ref": "indicator--7b817e31-49f7-4312-a40b-7ba1f91b1fa5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508f069a-f170-4c01-8c9d-b7c76a41f237", "sighting_of_ref": "indicator--5dede2e4-14c5-475d-9974-c2bf49b05fcf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065cfeaf-29ad-402d-9a4d-a284db3c4b51", "sighting_of_ref": "indicator--4fd472d2-8b0f-4f7c-b902-2bcb6e1429ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c86346-98fa-425d-a00f-a4408ef343cf", "sighting_of_ref": "indicator--e23e9324-784b-45fb-9c31-b0647b39378c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c91893-2c0e-4d1c-9ee7-1f4f80c39e0f", "sighting_of_ref": "indicator--62069e5f-2442-49f2-8fdc-0f0f1316b92b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dff1c2-72f2-495b-b4bd-dec6eb94e56e", "sighting_of_ref": "indicator--e5f49c03-7d76-48d6-adbc-6659dfae0be0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b75cb-da79-434f-8460-e27dad85bb02", "sighting_of_ref": "indicator--e5f49c03-7d76-48d6-adbc-6659dfae0be0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b0361a-efb8-4fef-97ea-319605301624", "sighting_of_ref": "indicator--e79f65de-660b-4751-9a0b-d9a3d694b3b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ae6393-206e-48c0-ae60-7c1ce12c5c7f", "sighting_of_ref": "indicator--7ad4c731-9600-4ce4-8fa9-605103688958", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67988f82-268c-4468-82ee-98fb1ec48770", "sighting_of_ref": "indicator--1101266a-af99-44c4-ad39-21be2b5984a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad7ba04-e78d-4337-81c5-1b7119fc1ba1", "sighting_of_ref": "indicator--0b1481a4-09e1-4bbd-9fae-c6678169c901", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b4d4da-2c6f-449e-a4d9-4ea51b2f64ea", "sighting_of_ref": "indicator--dcccec79-3542-4bf8-84be-3e69790d8215", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef74534e-410e-4ce8-9cf5-b19304184b25", "sighting_of_ref": "indicator--103c5d67-4814-4251-b394-c67c7442356d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8e13ed-278f-40d3-8707-550013a2e7e2", "sighting_of_ref": "indicator--4897b1e2-186b-4c71-b02a-3159a0eef6f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af15abf-8ac8-4df7-8c8e-a9176bfce78b", "sighting_of_ref": "indicator--d4aca5f8-c84d-4421-9875-d3bbbb6d5040", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cbd42a-a33a-4445-8603-1daa27176a1b", "sighting_of_ref": "indicator--cd0b89d1-6364-4727-bbfe-218074a919d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6672ea56-fc82-402f-80c8-e8c5895f6698", "sighting_of_ref": "indicator--703a122e-f245-407d-9801-fc27ce8a0525", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2d2015-74f2-4559-b80e-10b5c4c14a30", "sighting_of_ref": "indicator--1efd4291-d871-49c8-9e78-b214ef682090", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835fd3a2-24a8-4a06-85a6-57b0328902e9", "sighting_of_ref": "indicator--f12366fe-bb21-431b-af3a-6b352ffa97e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dc7d82-4aec-4dcb-9c06-1b5e3de818db", "sighting_of_ref": "indicator--4617448f-4884-4435-851c-318088521432", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011afc84-6897-4bf9-859d-5f056fd313dc", "sighting_of_ref": "indicator--fcb7704d-c479-436c-9966-ed0e159dc445", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024bf642-a900-402a-826d-ad866aaa15a6", "sighting_of_ref": "indicator--0e959442-9ee4-48ee-8017-114f68ca679c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba6e7a2-99d2-419d-a20d-1f7168d58334", "sighting_of_ref": "indicator--0e135136-b5da-4a2a-9a4a-4dd863a4e1ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdb4e7f-b284-4ebc-9632-1bb30e7de2b7", "sighting_of_ref": "indicator--3aa505de-2ec2-4677-bfec-7b50ab2df2fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b5ace9-fbc6-4ffc-bd47-46dadc8c62e1", "sighting_of_ref": "indicator--818d984e-a0f2-4e6a-a6d8-88d1369160f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e664d968-ec5f-47ca-b6b7-f2507fc5d8df", "sighting_of_ref": "indicator--06a7927e-50f5-43a1-b5d5-0d61b4ad2bc3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d1e89b-0b2b-462b-bbe2-d367f61dd44d", "sighting_of_ref": "indicator--4dae35bf-1255-4534-a355-9a286d6f6ce9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e256453d-184d-43d8-8f90-7dcaf494fe7e", "sighting_of_ref": "indicator--c3896e05-0903-490b-93ba-2296a9b74460", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b7b77b-6acb-4207-b246-d0a38b93f5ff", "sighting_of_ref": "indicator--b569da31-1128-46ec-a229-6db86cd8a350", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538d696f-82f1-4893-9e77-27b865e347b7", "sighting_of_ref": "indicator--c6860536-87bf-46ce-bfa3-2200f6344054", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a8014e-1e37-4ed0-808d-f17d792973c3", "sighting_of_ref": "indicator--79aa39e3-0445-4114-a997-bb6764c3cb2d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53f30f7-63a6-4c7c-910e-5427c070c4bd", "sighting_of_ref": "indicator--109e9558-e518-40ee-9d0e-ef3482636668", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5579d2-00a8-41db-a55e-beb82381ebe2", "sighting_of_ref": "indicator--c681bef2-3595-4b35-adee-7bb0f954c04e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a28e06-2068-4d4d-8802-01d9803ec592", "sighting_of_ref": "indicator--3e2d8307-698b-4b50-9ebf-d491280ac521", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab10d0-33dd-4bb5-8977-98595d356c7f", "sighting_of_ref": "indicator--6beacf0e-2a76-4eb0-809a-ef63b9868206", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea5792-aa97-43a3-98db-13497d9b7204", "sighting_of_ref": "indicator--0e7eeed3-ce7c-4d8d-9b08-16f49e228c5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20902526-3092-472b-8ea9-592217b26880", "sighting_of_ref": "indicator--e9b2ba9b-7cb9-4053-ad33-fa8784981190", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a28ba6-e47e-4ffc-95a7-808426667d3a", "sighting_of_ref": "indicator--c28b3f03-446d-4017-a652-09535d9f2678", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55be51aa-0847-4b32-b584-5173274820dc", "sighting_of_ref": "indicator--cd2b7013-31f7-4527-91da-0c1c289cef05", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda50319-1d9a-47b4-9d3b-0d0d3195f0de", "sighting_of_ref": "indicator--23c5ca24-71c0-44c1-96d7-534a3767307a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1f3080-b9ca-486c-8fff-81b5e8270d2a", "sighting_of_ref": "indicator--93a0c537-49ba-457e-b5aa-6c885d645004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41869c55-e58c-41a2-ae66-faaa6b12a964", "sighting_of_ref": "indicator--81fab6fa-f95d-4526-b6bf-4a8c73d688d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9887e9-786a-4116-a111-53333321dfde", "sighting_of_ref": "indicator--e8cbd538-0f96-4037-8de1-7e5fba85e620", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c2fa7c-9beb-49b4-b1b9-6b33ce8367c1", "sighting_of_ref": "indicator--79ca99dc-8486-43fb-8806-44aca2379ad7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a867ebb-b28b-4df3-93f5-d776d4f40586", "sighting_of_ref": "indicator--cbb6bf71-6685-48b0-a4f1-a2db3955b639", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4322b72a-9db5-4eed-99b2-fa472543e550", "sighting_of_ref": "indicator--e01772c1-6ee7-4948-a189-dc25d5b117a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d2ba60-cba2-4e86-aebb-53e15287ab94", "sighting_of_ref": "indicator--6e160579-9424-4cfd-b768-86325c990f0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3581313a-570e-4d40-a426-2a94501c092d", "sighting_of_ref": "indicator--689ba5e8-0018-4747-b03a-9f72f5332f40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc339e3d-c571-4d64-b55a-ca19ae95fc77", "sighting_of_ref": "indicator--9c031d90-52c7-4ec6-b093-2927336355d4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cc2850-07c9-45c3-bade-87013ea7563a", "sighting_of_ref": "indicator--22f751cb-cf4e-4719-8a33-e6b8bd049e32", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d807ea6-3085-4e1e-b489-99760894fba4", "sighting_of_ref": "indicator--277da7d0-3ace-41e3-aeac-010236435934", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c3ba27-9d76-4c79-ac15-32b8fe8b44de", "sighting_of_ref": "indicator--31f304d9-8c71-43e2-8ff8-d79b9d1d930b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad2eb85-3d22-4c82-a381-00ce22c1e664", "sighting_of_ref": "indicator--47361dcb-075e-4ab9-a6f5-2f2cfe2c567e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b7ba32-552b-4bd2-930e-8c9a1a9488ff", "sighting_of_ref": "indicator--3ba42613-3e63-4840-8626-e2db4925df4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f084d17e-889f-4d5d-b7b9-710273d926c7", "sighting_of_ref": "indicator--63358c19-9128-4332-8936-7e31d72566ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c99d48-91b9-4980-bf92-824327103408", "sighting_of_ref": "indicator--21c5cff5-8210-4889-a951-d71b864a62b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c438c574-f640-43c5-bd21-dda3deff4b41", "sighting_of_ref": "indicator--109ea2e1-dd2f-419f-9d72-fb4f95ce3a3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154cc0e5-e75a-4ddd-8c1d-a86f81213b4a", "sighting_of_ref": "indicator--aa63a623-c3ad-4900-b95d-25a032b4e2ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae000a0-cc58-4d2c-83cc-0fa0d3288cb5", "sighting_of_ref": "indicator--6bf128c8-e29a-4324-b47b-44d9d5c5e590", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2f8a45-06e9-4699-bc3d-f4d35ca32e39", "sighting_of_ref": "indicator--d8582da7-469f-4c41-ba97-14a99b7f8c7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa37431-3b3a-41c2-a961-ae3405aa3b03", "sighting_of_ref": "indicator--e95e3221-95fa-4a4c-a39b-800d418d0413", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f8f62b-4c1f-412b-b5c6-164bd86f38ff", "sighting_of_ref": "indicator--ff0fee2d-ef04-46a5-8f8b-0766a32d448b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db459ad5-7278-4257-b917-4b60ae2aee50", "sighting_of_ref": "indicator--30d37516-b0e8-4b5b-9fa1-ff8a7b43e83c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb94c86-4f3e-4658-a4b1-654c015c0794", "sighting_of_ref": "indicator--623b9c13-375f-4f89-aefb-8c498c90ad36", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d87b724-328d-443d-93a8-8f6db715b684", "sighting_of_ref": "indicator--b74a4c67-1780-4d57-810d-f692f031c543", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e062b9-653d-4385-95dd-ea898ecdfb19", "sighting_of_ref": "indicator--42acc950-3ee6-4325-b6a4-b9f5cc4597c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d57292-268e-4b81-8774-d8c2e0383e79", "sighting_of_ref": "indicator--50508489-312c-4879-8371-c2d5458c20c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc71625d-a020-43c0-b0d4-37bab2d59bd1", "sighting_of_ref": "indicator--ba682caa-8fd0-40a1-8cbe-79f65b62aae6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d4a152-10f9-4e7e-88b2-ead23fe1f70a", "sighting_of_ref": "indicator--bd733e99-56ca-45c3-937d-5f9ccc9779df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c0e9a7-090f-4063-93eb-064e212434fe", "sighting_of_ref": "indicator--4fcd7a03-a0a9-42d9-b025-a46046016814", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a14b4e-cfe5-4ebd-a0f1-33431af76e8f", "sighting_of_ref": "indicator--b499f875-4283-4297-b6f7-88213399aefe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02a42a6-59ee-4a66-8600-f3647f2c155d", "sighting_of_ref": "indicator--958b4eda-ad6e-4e5b-a9b8-b1ad8a37e8c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad03bcfa-7ff0-4134-9f6b-22469cf5ba64", "sighting_of_ref": "indicator--2319c022-0077-43f6-8313-37c45ba42706", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fb3d2e-a98e-4b6f-8010-cce68750187c", "sighting_of_ref": "indicator--92bdc06e-f5b5-46dc-b9b9-5b7a3ff40cd1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885a41f3-a10b-4817-af21-d726c56220d1", "sighting_of_ref": "indicator--15f53509-af69-449c-be16-1ee01fa0b37a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81df07e-db3b-4847-94ba-c1786e32da24", "sighting_of_ref": "indicator--77df2491-2660-446f-8b33-0a97c46b4ed8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d151c44b-07f9-4e2f-a3d4-e34c34519f9f", "sighting_of_ref": "indicator--3a3b2ace-c089-4054-9931-db0612c663ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8c4c4-82c0-43ca-94ec-1a2ad6cb69d6", "sighting_of_ref": "indicator--d7933018-10ff-46a7-98dc-0bff5278ac2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cd68aa-d958-40f6-9214-47e34157fbf8", "sighting_of_ref": "indicator--b854f917-df22-4aa2-9791-6e26982cd012", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12a437c-fe3a-41b1-8cef-51d642c212da", "sighting_of_ref": "indicator--15d08c61-e824-45b1-8566-6348022c10ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bb4f83-c729-40f2-9d47-16f97ce2bd5e", "sighting_of_ref": "indicator--d282a18d-a37b-4176-853c-d09dcc1708df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaf309b-3b2d-4e0f-8c0a-cdb9b1d5c771", "sighting_of_ref": "indicator--2cbb5c57-03da-4377-adad-d2a379c46a82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe61a0ff-bf73-427c-8039-85992b84a803", "sighting_of_ref": "indicator--866277fc-5c12-4f6e-9447-a662c0f4ff37", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3c6ca6-012c-4018-8e36-4fcd491ed975", "sighting_of_ref": "indicator--2094d9f0-4556-411d-b053-c73675f8d938", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24c0a5f-d9e1-4e7d-9d02-179a73cc28d1", "sighting_of_ref": "indicator--a22c8b35-1037-48ce-a38c-099fcce2e038", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0985956f-282e-45ef-b76c-3aa16fad39df", "sighting_of_ref": "indicator--57dac1aa-67ee-4f1f-a01f-a30a926be07a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62366921-65b2-4c0e-afda-8b7460288a6f", "sighting_of_ref": "indicator--683a3e09-1e19-4de5-a99c-e8380bb6fec8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7deeec-b9db-4aea-bc6e-1933aef95495", "sighting_of_ref": "indicator--8b755b4d-912b-4fe8-9735-459495ad5b8f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f6969b-d72f-45a2-acaf-525d2a85472a", "sighting_of_ref": "indicator--8721f2cd-2245-4861-be58-fb89e1424ce4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c51b201-6226-484c-a181-4cc3d1abb46b", "sighting_of_ref": "indicator--8de4aac5-9d71-450d-a14b-c1dbc877e33a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46627655-71e4-4f21-b376-b5f071a55ca6", "sighting_of_ref": "indicator--8ee170e9-f392-4fca-a496-0a474713cce9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28edbfd9-4b0b-41f3-8b39-95ddeb4657e2", "sighting_of_ref": "indicator--fdafdb92-5f7c-4605-b77e-e580cf18189d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3d2a9d-ec79-481d-a7c9-9a837788ae77", "sighting_of_ref": "indicator--3f305693-f898-4179-86cb-dac30278eb36", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584ff719-0394-4400-acd1-6bad06f37399", "sighting_of_ref": "indicator--f87ff933-5a8b-4d04-b232-6abfc99dd062", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a267f739-129e-42bb-8a58-5fa2cbc9bb55", "sighting_of_ref": "indicator--06a2e4b8-7563-4f7b-8a1a-98d87b2ee736", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd927583-f712-45b9-a1b5-ea1298cb8456", "sighting_of_ref": "indicator--b136025a-ffc5-4b9e-9c0b-016197a1e74b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159d2dbf-6931-4691-b486-47c4d8187eb7", "sighting_of_ref": "indicator--ea958de6-7c43-4a84-8707-3a7aa5aafec8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dced09-d97d-4cf0-a725-04efc92d7325", "sighting_of_ref": "indicator--6bdacf2c-3d63-4904-967a-8d02e8058d8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68db5bd-2431-4455-a074-40abee372399", "sighting_of_ref": "indicator--eee27ded-0d26-4d99-a770-9fd8f1d15b89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccc5d29-be90-477d-a529-45b6aa07b9c3", "sighting_of_ref": "indicator--07bfaafc-9e71-48b7-a49a-986584318c24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68267d1-f16f-4bae-9f41-17941eef4bba", "sighting_of_ref": "indicator--ab9c6eec-ad96-4a82-aeff-407d550de648", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd83c9-84ef-4518-bb23-12c55b33d48f", "sighting_of_ref": "indicator--716a7dad-11d0-4f03-82cc-7dd0a2ae4f59", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c27e847-6560-489f-af7c-41e6b951baa4", "sighting_of_ref": "indicator--8ebeb62c-8735-417c-b5b6-5b085bd3a4da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b30acf3-eb90-40d8-8acd-643fe602cc82", "sighting_of_ref": "indicator--bd33f79c-2958-4dfd-a70d-051124e13db0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df99a37-7a35-46b5-a45b-a754aa0c1b9e", "sighting_of_ref": "indicator--9f813ce6-a871-4314-9a17-5db299fc052e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538f15fb-c665-4235-848a-24e07b678ac8", "sighting_of_ref": "indicator--3a3ff586-f0ff-44aa-af8b-304175fda3c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e264495-89ac-47fc-9cc2-f12aeee5d124", "sighting_of_ref": "indicator--8ed42e41-699e-4f6d-8c08-225656e29392", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013f3e53-6730-440a-8edb-6af9286f2218", "sighting_of_ref": "indicator--e88b925e-ee52-4896-9829-7dfd8f618e45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46907409-1606-4b29-b907-cbe9dda261f7", "sighting_of_ref": "indicator--a7cceb33-a36a-4423-acd3-9f39e30c5011", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dcf042-0cf0-494b-83f2-d3b4a3bc691e", "sighting_of_ref": "indicator--2ecbd1ac-e7ef-4f5f-b19c-75b1e9023ec0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf53504-80b2-481a-9f8d-6bfe3d144bf0", "sighting_of_ref": "indicator--28e21787-05fd-43d0-a0a3-67a4b87d4ca0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc1f21c-6bb3-43cb-973c-ec9163c65dd7", "sighting_of_ref": "indicator--53ebf694-b3bb-4b64-a28c-96d38d0554a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eb746a-1155-46a7-b610-0a889e2805c6", "sighting_of_ref": "indicator--c5507c53-61b9-4004-935c-61cf480dc790", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33658076-7a42-4e27-b3b0-b60444247016", "sighting_of_ref": "indicator--e6d03a9f-d9fb-44ff-b881-b488d8e0292c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2323545-e2e7-4ca4-b660-688341c5e5c4", "sighting_of_ref": "indicator--ad75c838-04d4-4ed2-bb84-8d0c0e84d957", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4456d142-1dbc-4495-ae3c-1d93340c823c", "sighting_of_ref": "indicator--b95de5b4-dbb4-4b3a-9c74-673dcefe54c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4b0910-24bc-4abf-81df-59ec3f83432b", "sighting_of_ref": "indicator--4847b8fe-1100-412a-834b-abc1f96fbf18", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447c8003-3a84-4749-9ede-76881223051e", "sighting_of_ref": "indicator--57882e38-682b-411c-8de4-23943cdd2d28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3400258-6cc5-4774-b3e6-b21bc0021394", "sighting_of_ref": "indicator--ff0b7fe7-7ec4-4dbb-a982-8e7d80fccad4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590eb289-b771-4ec0-9bcd-431d2c5e68de", "sighting_of_ref": "indicator--0a3bf5b9-317d-477c-b8b6-8d6b8fd5a5c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adcec60-708a-4d13-88c6-f832888d94df", "sighting_of_ref": "indicator--65d52205-3212-4b6c-8d74-9a0ff6b6a0c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6593d08-c9a1-4ba6-9f13-e5c94d34eb4d", "sighting_of_ref": "indicator--cc99b373-9737-4611-aae6-7f0574a1885d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c6093f-011d-4718-a518-f20d18d0bb77", "sighting_of_ref": "indicator--10e32f61-855b-4b8c-9215-47974306221f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb2b1b-d0e9-4e3c-b36e-717d57d87749", "sighting_of_ref": "indicator--3c3300f3-3375-4cb2-9d9a-00628d5824d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013610e4-4733-4706-a450-e7f4bcfbd6a7", "sighting_of_ref": "indicator--04f804e8-a202-4c4a-b236-c1f9888709b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7d62dc-893e-468a-908d-53b65c34e070", "sighting_of_ref": "indicator--27a8c127-e058-490b-9cd1-3e5e8b01d2f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d2a59e-b31c-4b87-ba4f-a0c5f2990ba4", "sighting_of_ref": "indicator--15e7b2b5-8a04-4c00-99c9-267cd4527cb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fce3f1-f284-44c0-8311-918a29dca5e7", "sighting_of_ref": "indicator--994c1957-a1eb-4b0d-8a82-92c069fd97b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d05914-be1e-425a-abfd-f738126d0bbb", "sighting_of_ref": "indicator--7a58268c-0f6c-4139-aefb-131534e50977", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b45be8a-617a-483f-8dea-119e582b4f79", "sighting_of_ref": "indicator--8632c638-f65e-455a-abd0-3793c7c2583c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54c6655-7d8a-495d-bb99-42f15d542353", "sighting_of_ref": "indicator--22323735-078f-48e3-b921-dc06e6506cdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84946e00-b233-4b36-9295-cdf1ce8c88ff", "sighting_of_ref": "indicator--9ab82ed7-6820-43d8-9234-b3529b2cf981", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28702051-f721-4264-8e55-187eb21cef94", "sighting_of_ref": "indicator--b149e415-8a65-4fce-ba4c-b97eaa2918aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288d6f9d-ffa4-4d33-89b6-3517f918ec0e", "sighting_of_ref": "indicator--89a6a4c2-364d-48cf-9b72-b9441195399f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369bee71-1eeb-446b-9d3c-262a710c87d9", "sighting_of_ref": "indicator--218c8013-b4e7-47f0-aeb1-17687a2dac5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b28f3-fe6e-4ea3-9b08-ac859659bf4f", "sighting_of_ref": "indicator--57c10b11-5762-44b6-882b-bd7a15b0968a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48080791-679a-4974-a796-eb97d066a81f", "sighting_of_ref": "indicator--8adc042c-fa54-440d-8b93-8f49923cc0a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56ade13-6186-4116-9130-6045cf155e2d", "sighting_of_ref": "indicator--c3d6457d-81d6-4dd5-9c72-363532921e2b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658fcdfa-f012-4733-b592-9590a9bc8a36", "sighting_of_ref": "indicator--13ceacab-1beb-4943-b6bc-7bef5449220c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a27e27-3a38-4822-bf8b-c3762b563dd0", "sighting_of_ref": "indicator--eb81770b-2e8c-43ab-9dd1-263b78972203", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad17f99-3f77-40ca-b5cf-1ae5e7cf4e50", "sighting_of_ref": "indicator--ba0c3c95-60a0-4321-b7b5-f0d7a16b6202", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888073ec-8978-4a3e-8162-fad5a8580064", "sighting_of_ref": "indicator--88e05130-9a0b-45c9-bb7f-30cf8f190314", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaa348e-fe01-45a1-b6cd-7a262ba4ad72", "sighting_of_ref": "indicator--27ab6937-81fa-4642-a557-7c0527e5cd4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c268f0b2-9327-431b-bb28-a4892d056d58", "sighting_of_ref": "indicator--720389d6-878e-40b9-9766-9b2c37ff19ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98651da4-b846-4c45-97b6-db292288df1f", "sighting_of_ref": "indicator--0f7660cc-cc1b-4d7e-b1bf-6ee5adbdcb45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90e175-5380-49bf-9e47-5d53a4d03cab", "sighting_of_ref": "indicator--93576209-6b05-48f1-8546-b35692515030", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913670b2-4d9a-4afa-b8af-41d22b0b0d5b", "sighting_of_ref": "indicator--af00278d-d71b-4f11-9077-70c64b01b027", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416fabf6-4b44-426f-b5e1-a00a4e61599e", "sighting_of_ref": "indicator--77335af4-b119-44c1-b2bf-20d1056db7c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a923cd74-c053-454c-986a-438c123facfd", "sighting_of_ref": "indicator--29d3c54b-334b-419f-b27c-81cea72222ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c565881a-7cb6-4898-b759-c838f502ddd7", "sighting_of_ref": "indicator--aefce0ed-65bc-49cd-9c48-6daa58c5c78d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b18e11-e4a0-4c1b-851f-a46512d46791", "sighting_of_ref": "indicator--35e16610-4292-4770-93f7-2764fee52ce6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47b75da-0170-49eb-8583-2746cd62717f", "sighting_of_ref": "indicator--db9774de-67e7-4a04-b347-eae56727d975", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14838686-7137-4c17-9eab-578d8c299de8", "sighting_of_ref": "indicator--3368da7d-50e0-42f4-a5ad-53711ac7ba7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d347a19-07df-4d49-83b2-ffcacee2ead6", "sighting_of_ref": "indicator--461f729e-4a9a-4349-be8a-fb2587eed188", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2c516a-b673-4141-b2db-8e1d930e883c", "sighting_of_ref": "indicator--3d6b6682-7bf5-4d46-9eea-ed4256219844", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16da039b-93e9-415d-941a-818530a12ed6", "sighting_of_ref": "indicator--a67fc43b-4b37-4bc6-8ca7-8d4f012cc3c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f8c36f-5ac3-4bae-8fb7-a858c95a45e2", "sighting_of_ref": "indicator--43856615-29f8-41f6-8d18-0dd2c2a37a3d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c225273e-96d7-4063-9c4a-ee88e62105d5", "sighting_of_ref": "indicator--9a72d402-9a8b-44bf-8a75-829f638ca272", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f15331-5d60-4ac9-8c30-67ca215c6e08", "sighting_of_ref": "indicator--dcc07e42-a58f-4210-8bd0-af6c0fd28d11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2782dc0d-1db4-4e82-82fc-028f03b08aa7", "sighting_of_ref": "indicator--0fe72240-56b3-42e5-89ea-dd04fbca1dd0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcbc123-8881-43ac-b5ea-356ce13585a7", "sighting_of_ref": "indicator--d6aaecd6-a9e4-44f0-9151-537d3539d26b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c533be73-c688-4357-8edc-1f7263f1aa1e", "sighting_of_ref": "indicator--ac1564f8-2da2-4d0a-b349-3aacacd7b2e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce258545-7631-4e51-b2ed-99c61d78d3b4", "sighting_of_ref": "indicator--418776f5-da4d-4faf-9c52-9b2ae923aaf3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cda8f00-54a4-4bdd-b3d2-eca54b53ae35", "sighting_of_ref": "indicator--3e6b9582-5bb1-466c-b763-bd1cad2d311e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563573b4-da90-4770-b137-a46994d2f48b", "sighting_of_ref": "indicator--671ac13d-a4f7-4de9-b183-a8b4516f2972", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54580ebe-96db-49bf-998a-c2045066a7f1", "sighting_of_ref": "indicator--a6172762-7c97-48bb-b327-ed9e250b2117", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922deead-d5e8-4c32-9145-fd0be66fc311", "sighting_of_ref": "indicator--68c53752-f188-4e7f-98ba-2e976850ee90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7ac504-7098-4c80-bdca-90c90012c35e", "sighting_of_ref": "indicator--ae0f601d-36fd-46d9-b7d8-76d28632a83f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375c85fd-de11-4a3d-afe9-199f81f852bd", "sighting_of_ref": "indicator--3d890e71-7a5b-452f-9df2-d3068b98cf9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f682c40-af89-473e-909d-e1c3fbf4add0", "sighting_of_ref": "indicator--fc861227-c586-4ae8-a2b8-eeab1b4eb4ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f95bb9-ebcf-4fad-91c5-35984c22e4f7", "sighting_of_ref": "indicator--7ec72204-db1b-4108-8997-046a376cb4de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacd7aaf-df7a-4ad4-83b9-c02e5a8bc869", "sighting_of_ref": "indicator--4d1f5511-3b32-46df-92f7-11ce8688eaaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc55bc5-27d8-4ed6-87b0-1445a166e34b", "sighting_of_ref": "indicator--3490f254-12fc-48da-a071-961db9798717", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed73a0e6-5b8b-4033-add7-024b24af51b2", "sighting_of_ref": "indicator--404ebc79-2f4b-4d43-bed0-0af365e7f90e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87549c1-4ed7-4df3-9b79-5803674a5670", "sighting_of_ref": "indicator--ab818596-bc9e-4463-9da8-eff6ae31fc94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcf7288-bc84-49d1-9af0-c7693045f379", "sighting_of_ref": "indicator--34587b02-b32c-4218-a126-e31572130308", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776c0c9d-c913-43f5-8190-6b926c6119ab", "sighting_of_ref": "indicator--3b5be5ad-ee24-44e7-b5a5-0afca495413e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b600802-b36f-4fdc-8911-ebd673afeb89", "sighting_of_ref": "indicator--272c89f7-6e6c-4cd0-bdd7-cc0d3e7c05dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b4cab2-95cb-461a-98d8-4262d2046d7c", "sighting_of_ref": "indicator--c2b314e1-c81b-4a20-84cd-8a6004af3098", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83571c1e-230b-4094-ada7-bd47a0227ce2", "sighting_of_ref": "indicator--0d98fb80-6d9e-4e64-9d13-90640cc62692", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22117fa7-c9da-474e-8cfe-794f3791809b", "sighting_of_ref": "indicator--53b2e95c-e3b1-4e0c-9a0f-2f4a28dfe043", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083c23f8-d281-4f1e-a8e3-e386db4efd75", "sighting_of_ref": "indicator--61d6d82f-7173-4161-a8e4-4e6ed57b1b7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffe2ae8-ccbd-40b0-b40e-4e64b1c4f159", "sighting_of_ref": "indicator--cbbb8dd0-5679-40cd-a859-df983615b20a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd00c75-4d04-4f93-97a7-b1652856d8b5", "sighting_of_ref": "indicator--d64c7711-24a4-42ec-bc56-b721997283c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced199a8-28fb-4ae3-a24a-cfdc767aa0f3", "sighting_of_ref": "indicator--2a5e8697-0784-4211-a690-8b36b154fb8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a43b6e-d5ad-4585-98cb-01cc049f568e", "sighting_of_ref": "indicator--a98c5a62-47c5-4e0a-b6e8-f4cad89f13da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2be58c-ee00-4572-8309-5724c0323621", "sighting_of_ref": "indicator--9d81519a-6ed3-4dce-b370-cffe80b7dd3e", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e9c38e-2f72-440f-a379-806f2b187419", "sighting_of_ref": "indicator--f5413f05-aab9-4d37-9c94-599989575d98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e45c991-9619-4ec9-b022-a077fdf9e769", "sighting_of_ref": "indicator--dbac5637-99f1-43b0-a951-4e009ece12bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a23bc-4c28-456e-b278-41ef37a5955c", "sighting_of_ref": "indicator--8d04eefc-94df-42da-b0a8-9ed54c8d380f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfef0175-e8f4-47a3-90f5-2075a1f3d1fe", "sighting_of_ref": "indicator--4716ee04-25da-4eb5-a70d-f6ae8a194b06", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83214f6a-d786-42a6-b8d6-5df0cc610299", "sighting_of_ref": "indicator--55db2319-0f64-423b-bafb-40f7c66e8397", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71ce6e8-f076-4bc1-8d22-4764c2fcabb3", "sighting_of_ref": "indicator--71874ba4-d402-4830-94ef-1548d6437ec9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beac2f1b-05ee-4d23-8755-cd0c6be0f03e", "sighting_of_ref": "indicator--6701fcec-a344-4cde-8c1e-dba4203ee415", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ae56f-f3e0-4aea-8710-0f697b715ae9", "sighting_of_ref": "indicator--74687d10-c8fb-43cf-986e-2283f74b5298", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e40cf90-ee30-4722-940b-f4cc04ffb97c", "sighting_of_ref": "indicator--dfca746a-82ea-4ccd-ae5a-350c46110774", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a23fa-64be-4f8b-a528-0faaae506577", "sighting_of_ref": "indicator--80be16fd-9c95-41be-895d-d9c9887dde4a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3890ad-936a-4c23-8eb7-4bfd228103d6", "sighting_of_ref": "indicator--0b20a8fe-65a5-42ad-af6d-08872173e6b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54544b1c-d51e-44df-b821-41934dfc0f18", "sighting_of_ref": "indicator--d997984a-cca7-4bda-a913-c50965687d13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54405d5-c81b-46fd-986d-ed9cebffd260", "sighting_of_ref": "indicator--0642fb93-bb88-485a-843a-137a474ceb71", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbec0366-4852-43f0-8297-89382b747a97", "sighting_of_ref": "indicator--5abccb52-bf8c-415c-b1a5-00a8054cb1eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42306f67-08ea-4892-8340-7f059193a0e8", "sighting_of_ref": "indicator--5cd01edc-2cec-4be7-9702-0fda17e251d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884409d2-0227-465a-80a3-5133524174ed", "sighting_of_ref": "indicator--6e4762e6-832a-4d1a-bee6-1a574bec7971", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d03ffd-bed7-49fb-acdc-f6033f480a35", "sighting_of_ref": "indicator--5aa69ed1-72cb-4bdc-ac9e-600e2c7b62ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad054807-2555-424b-ab69-f1daa353f5a4", "sighting_of_ref": "indicator--70b0ba3e-f33b-4b9e-8299-817f1d5777c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea586fdb-f4bf-4bd7-9c98-e824ea7b684a", "sighting_of_ref": "indicator--446ca1df-04ef-4157-bcd0-80173802f918", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a043d6ff-6c77-428d-a6b1-08d66c7ac511", "sighting_of_ref": "indicator--60ca91f5-c992-4d3f-9c1c-b663ea5d7402", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d5ecd9-0110-48e7-afcf-5158f2f36b98", "sighting_of_ref": "indicator--6b656637-f5ac-44a4-af1b-71dff5a83d61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a737de-561f-4bb9-aea1-bfe7b2a0f1b4", "sighting_of_ref": "indicator--833b1952-2ac6-4211-9170-c6d2981a62c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132459ff-3600-4977-9a40-f5282c729c9b", "sighting_of_ref": "indicator--0833c4b4-5e6e-4ed4-bccb-1f81336d1274", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012fa57-7bb6-4a4a-bbea-8c845c53fea2", "sighting_of_ref": "indicator--82226717-e022-400d-803e-018b51404848", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed03192-4ba3-40ea-9de2-19f31211d86c", "sighting_of_ref": "indicator--907b1026-b478-420e-a0c8-e8c389f8a70e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5efd3a-ac72-4f1b-91eb-531ae4d2262f", "sighting_of_ref": "indicator--e769907c-3c06-41ba-b712-9562c1951307", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92219208-ed2c-4916-8e90-6f4e8d2a5b23", "sighting_of_ref": "indicator--3c9db50a-19fe-42a9-a522-689f0c8aedb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda89bcc-bbfb-4af4-a171-661e4bd3209e", "sighting_of_ref": "indicator--e459e6f6-3752-4a84-81b3-92c2d5ddade2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e47ca9a-32ba-4bd8-a995-a08ea02cfd77", "sighting_of_ref": "indicator--c05cbbc8-7fd8-4134-b712-625b9bec165f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d881c4-7ff1-49c7-9b4e-4c9e5effeac9", "sighting_of_ref": "indicator--3ac7532e-33bf-4b77-b8e3-46b5e6c9fc34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380c0e9-5d6e-46a5-8f3a-897a27a9a53d", "sighting_of_ref": "indicator--a38ee4bd-0de1-4b6f-bf14-088264539090", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc38b5ba-71e7-48fe-917b-2422178e646a", "sighting_of_ref": "indicator--68472f56-9936-4675-b1c0-9d8024c88b2d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3548e07e-5179-4ca6-87f0-7e77eaf8e4be", "sighting_of_ref": "indicator--6e287936-9a99-41bc-8363-f94424882756", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae57b5a5-8dae-4a8f-a589-8def22669ac8", "sighting_of_ref": "indicator--2abe349b-5d9f-4d65-99a3-d97a5aeade18", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e954fb6-90da-4d12-afa9-9d31a0f7e84b", "sighting_of_ref": "indicator--28af1b61-8315-40a3-95bf-68b35e7002aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c083dc7-564d-4ca0-9db6-f7f350d309ac", "sighting_of_ref": "indicator--147d9a29-f839-44a4-a153-bb3f12530b9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4495ada-e36b-40bd-9772-493106508dcc", "sighting_of_ref": "indicator--4b9f2337-994e-442c-98e2-cca5ad398689", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82557530-4535-4071-b723-6fa29585b9a4", "sighting_of_ref": "indicator--c97085af-5d03-40c0-9349-d0182c4ff2c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540ba64e-6d9d-4d17-affd-522655f60ca8", "sighting_of_ref": "indicator--5846dd8e-5d66-4a61-b16b-1c61d85b4ed5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a247674-8a55-4a16-a87a-772ce4bf8297", "sighting_of_ref": "indicator--0126754f-4d64-4d48-b593-f557b7a98299", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61802aa4-79ae-4c7a-bf54-9400493ed318", "sighting_of_ref": "indicator--d71ce040-48a3-4ecd-95eb-20b5432064eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c8a603-e5d3-4b9a-a6eb-486b9b88dd0b", "sighting_of_ref": "indicator--b042d157-efe2-4ce3-b824-2c6cb2e475ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23307670-f2a0-4d93-8687-f7d8e229f30e", "sighting_of_ref": "indicator--7d38dd74-0ae7-480a-bbb9-b5c17b06de68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64f21aa-5eba-420a-8f6f-1316128bdcba", "sighting_of_ref": "indicator--f3ef679e-d351-4cf3-82e1-c057f8b6c200", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bc4cec-305c-40ea-a7af-0522c8ce6e55", "sighting_of_ref": "indicator--8de8f296-8e72-417c-a0dc-c194c8817f2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8d8e17-fcef-41bb-bacc-68a1775fc208", "sighting_of_ref": "indicator--dcbae606-b798-482b-86fd-f49fb580841c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e201e125-b0ac-4fd9-aa85-c735d76240de", "sighting_of_ref": "indicator--d3aa260f-76e2-46a2-837c-25c806ee6eeb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8fc7bb-9a7b-4b4e-a917-620829a1960a", "sighting_of_ref": "indicator--46a4f594-4b16-46dd-9306-9db937173f4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fa214a-f6ae-452e-ae01-659a4aaffb40", "sighting_of_ref": "indicator--720a6526-a76f-48ba-bcb9-75ea298aaee3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add28fc4-1bef-44dc-9517-624f163fc03b", "sighting_of_ref": "indicator--51232072-894a-4c88-9cbe-c07438dedf77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3037f7e-5b24-4b4f-8cba-3604accb2b8a", "sighting_of_ref": "indicator--c5a91fd4-a9e6-42f1-8855-f8f298ea4a8a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2c33d1-c779-46fe-891c-b6cd1b61bf68", "sighting_of_ref": "indicator--0dd1d817-6ad6-45f1-bafc-05a3bb932a9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83df1470-9b66-4018-bfd5-5bfb2598d2ab", "sighting_of_ref": "indicator--47689f33-63c6-4a88-938c-4647873f425c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0703333d-9125-409d-86de-4467bdb41871", "sighting_of_ref": "indicator--82b7672e-907c-429c-a616-656b031d7fdd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d1eda7-a153-4213-9add-69bb08480736", "sighting_of_ref": "indicator--c632a390-3a44-4a39-8daf-4db8a60433f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfe9ebc-5b1b-405f-8960-2cdbd1b721e9", "sighting_of_ref": "indicator--67996e2a-3dea-4be7-b4c8-987b477642f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0982ec13-9dbc-45ce-9bef-7677acfcf606", "sighting_of_ref": "indicator--b4f83ad5-8301-4fad-99d2-534316c2997a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e780ff65-ce82-49f4-9dd7-fcb8b7a34125", "sighting_of_ref": "indicator--96748a69-3848-46e7-9590-b5e82637709b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862223b5-7856-46a9-8569-a7a0295e5a72", "sighting_of_ref": "indicator--46e3edc9-3329-484e-8bb1-749d397b6baa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71b46df-0b4f-4212-bc74-ef5eaffa234b", "sighting_of_ref": "indicator--0b51f99e-1bcd-4a2b-9885-b7f1e1abbf83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9287bae-9847-4842-841c-454cbebcbf3c", "sighting_of_ref": "indicator--2c2537c1-8b17-4bc0-97ea-5fe8b207f146", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1f6792-3381-4de7-b38e-aa7ebe8df4eb", "sighting_of_ref": "indicator--525eeab3-8a98-4895-be0d-b0b95bfc0a0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b8505f-db73-4762-9b54-ca11e3666048", "sighting_of_ref": "indicator--5f4f050e-4db2-4b84-80d7-60573a03599c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb0ccee-0e39-4221-88d1-987add3197ca", "sighting_of_ref": "indicator--4d8e0830-fdf0-49e7-a77b-6fc05a68424a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8fc825-8dd7-47e1-9efd-7b844f7a02c9", "sighting_of_ref": "indicator--d9e6a2fa-4e04-48f1-9717-b7b998f1f429", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25add674-06b5-4c38-8c7b-3b47df2b3e2a", "sighting_of_ref": "indicator--f6d2344c-fec6-4304-b9db-a7f8a8d70a40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af908da8-cd73-4e61-a9e0-ddeee3ed6ea6", "sighting_of_ref": "indicator--f6283df4-13b7-4a12-9f6c-ee9303575852", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63f53c9-ce7c-4212-8246-8bff98af7e27", "sighting_of_ref": "indicator--c980a2e8-b534-4356-9cb1-08caec87c68e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61134ba8-3150-41e1-9ffe-8d6c47821e9a", "sighting_of_ref": "indicator--92f16439-54b5-4a1f-a004-52566482bb47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce5b8de-8605-42e3-98ed-703d5e6f8a92", "sighting_of_ref": "indicator--6efac461-a1c8-40ba-ba3b-0731f19d0410", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78e1ece-00df-41bc-8e5f-a5a62ed98edc", "sighting_of_ref": "indicator--20b3b483-8fd1-4ce5-9df8-7c6797513021", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4cb348-91a6-475d-8a9c-c634b91ffdbf", "sighting_of_ref": "indicator--a31b95b8-2f16-4037-832c-7783d6a535c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556c44f7-784c-40c2-81c1-da49bff780e6", "sighting_of_ref": "indicator--c17081b2-be26-40d4-b2ee-ad09234a7865", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4725b6-ab1a-4741-a87a-26dcbbf880dc", "sighting_of_ref": "indicator--f9488c63-f81d-48a8-9f8f-0ccef5ce1027", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90ddf3a-0aff-4a0d-b7ef-293027086c4d", "sighting_of_ref": "indicator--6bce744c-2aa1-4187-bb1b-3d63db11a67e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d93c5af-0cca-4e9c-b3ba-8baa794ad668", "sighting_of_ref": "indicator--59b78a62-7de0-497f-9c35-a8fedf8ed2f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1417d272-ae10-4ede-9a18-4c65ffa57fe9", "sighting_of_ref": "indicator--52d52ccd-34e7-4b04-97c0-449c6a790f11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfef2b8-dcf4-4265-a00f-cd2259001eec", "sighting_of_ref": "indicator--e59bfaa5-ba3b-4352-8c79-a1c9488bed44", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b26dd11-63cd-459d-a3ca-cd2bf6c6ebd4", "sighting_of_ref": "indicator--f79d07ed-60dc-4487-a74d-1346418740f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89bc79c-e0e8-4496-b407-29602fb273a9", "sighting_of_ref": "indicator--ec0b4ea8-b0bf-427c-a6e1-1211e91d9a5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d22a109-deaa-4114-b544-447cafa472ff", "sighting_of_ref": "indicator--885f4a10-eeea-44f2-8a26-c27598ee191a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e09b9c3-195a-4a67-9039-e71fc340e942", "sighting_of_ref": "indicator--e3ab70e3-85e5-4df1-b01a-ce4ea1c2f43c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15677e2d-eb1e-4ff7-9866-88e0e5193d41", "sighting_of_ref": "indicator--5799a7e8-e8c9-4428-b28d-11430a1dce15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f782b8b1-1f04-4e56-9543-55387a4c225f", "sighting_of_ref": "indicator--f56a59e2-ee2d-4b28-ae2c-d600cfe16c63", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c5a0ef-9d5f-4e3e-8998-4c73e5f18f6d", "sighting_of_ref": "indicator--6d56187a-c327-4b9f-a356-6b6a2ba272fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6912beb9-7c73-4eae-8a06-8b1565c052bc", "sighting_of_ref": "indicator--f3790d3e-dbc0-48b4-8b6d-563aa6ec31f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324bf150-f286-4d57-961c-b25abb3b8b0c", "sighting_of_ref": "indicator--487f13c8-7785-46db-aedd-0b1f9bbb2474", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b35250-3d38-457b-afe7-f36d24cdd7cd", "sighting_of_ref": "indicator--74fa650e-2426-4b24-a991-97602ebfb8a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba55f6c2-8fd3-4e83-864b-512f0cadfdd7", "sighting_of_ref": "indicator--99a4445a-32b4-43af-ab68-727048a54f49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0db8cd9-4b86-4162-907f-cad620d25de9", "sighting_of_ref": "indicator--879366ac-4e66-4d42-a843-c7d5106598fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6144bf-58d6-49e3-b996-1a7c6d7d1e11", "sighting_of_ref": "indicator--23595873-75ee-4868-9daa-7a2ea0c53a6a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417fba21-724e-44a3-87fc-a600b1908ec7", "sighting_of_ref": "indicator--de7b4c9d-7758-4012-8fba-002bdf583669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520f3a27-84d0-4d05-91c3-6cedf170b1cb", "sighting_of_ref": "indicator--56f8bdb2-cca1-4a50-b827-2ad7bdb79f6d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54225a91-bec3-4714-a8a6-581d8033ab24", "sighting_of_ref": "indicator--ca03abdb-f957-4cce-8f97-ce4af77d70a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93283060-d12f-4790-8b6b-cd97bccf6e42", "sighting_of_ref": "indicator--f3423305-e727-4d17-9ab4-50744dd3eb15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015a96fe-7059-4256-a25e-46a678303722", "sighting_of_ref": "indicator--bf8afa80-26b5-43f9-9893-9657ddc9af0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34bacf3-65c0-4914-97c6-c9a72d524b1a", "sighting_of_ref": "indicator--5956cddf-1cde-4100-8ae8-4159343a4dac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f8624a-99f4-448b-8002-5449532ca749", "sighting_of_ref": "indicator--99d9cef7-09bb-423d-8ea6-9d38aa97df09", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6a06f9-67d0-470d-91d3-ae893fa56d34", "sighting_of_ref": "indicator--a8472e3a-97c3-4246-a535-57a45757a8b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a5accc-44c3-4244-954a-9d44dd917a5b", "sighting_of_ref": "indicator--52dc1390-6820-4e76-8063-a47ef3d46570", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c713ef7-1ff2-4b68-bb7e-f06981576a14", "sighting_of_ref": "indicator--084d2f93-5d40-4b50-8a4a-8d32498d48d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c4d5a8-6d76-477f-ba5e-f5f77cea6181", "sighting_of_ref": "indicator--7b2c0734-1830-4527-af6f-9874f4e68f7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb0e684-6fdb-42db-af42-336dfa08e90f", "sighting_of_ref": "indicator--3fef5643-38a8-44c9-a32d-69ecd32a7f23", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0155406-8a1c-4bf4-aebb-b7c4185c02a9", "sighting_of_ref": "indicator--a9eba6e3-8ca4-451e-b0d2-928c891d1e89", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590ebec5-c507-4cc8-b08a-b55e68accb82", "sighting_of_ref": "indicator--4d716ae4-5272-4fa6-b224-128bfa8c564c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d731f06f-88c1-409d-b18c-d6f7fd1aab9f", "sighting_of_ref": "indicator--51f8a060-5eeb-4b49-af13-7b935b18d413", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facb6e01-7816-4893-ba69-1e20316627e6", "sighting_of_ref": "indicator--c461ce7f-32a0-432d-b625-9a0e6127a00d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b43834f-4153-4972-a06f-671d48155e85", "sighting_of_ref": "indicator--30d1c159-e754-49f3-a7d8-4a100bbc23c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0c5340-c5e8-4cf5-a8d1-b41026e2921a", "sighting_of_ref": "indicator--7e528aba-d940-4fbf-b3bb-d53f19336840", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273fe6ca-e0da-4eb8-a9dd-e175008b1eae", "sighting_of_ref": "indicator--96ca541b-cb2d-4d61-b7d5-0b6453016c04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c720a7-ca3d-4a87-a5ee-d5804826f032", "sighting_of_ref": "indicator--d22fd72d-3181-4d26-83e9-7c20afc3225c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87fb6c1-5eca-4f97-972f-74d21ec636dd", "sighting_of_ref": "indicator--d588444d-4875-4555-acec-4e274f94ed1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcf2df2-2013-4e73-ac95-7b1263b265b5", "sighting_of_ref": "indicator--da011cf4-abe8-4495-83da-21fdbe3be754", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a400885-ea3d-45fc-b8c8-c2ec40ac6f91", "sighting_of_ref": "indicator--a0f3c44f-33a4-4f49-8586-f77c28426513", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310cda4a-b731-437f-8393-eaf8f3a23930", "sighting_of_ref": "indicator--c3d49115-3f1f-4dca-9d25-a1ffb87bc22b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9831f8-77dd-455a-af42-693e61ce8135", "sighting_of_ref": "indicator--31bdbe22-0cb9-479c-b824-61c176555031", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095aeb7b-9bc2-467a-993b-9fb4fe40331b", "sighting_of_ref": "indicator--b5461f16-982b-4bfd-b2ae-104ba28d9a84", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cdd739-eb29-473b-bc4a-e6ed6a062c97", "sighting_of_ref": "indicator--9990c769-fbbf-4eb6-8367-cc05ddad8f28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdcb1b3-f5c9-4f22-b0d3-8ad259c134c1", "sighting_of_ref": "indicator--454190f9-5402-45fb-822f-e22801abeb3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ebaa56-8514-4efe-91c2-e230ddb90c54", "sighting_of_ref": "indicator--72491095-e34a-41d0-abc7-2c738a6dc7b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64960056-e07f-4df5-934a-3b6f4e499c68", "sighting_of_ref": "indicator--94950a8d-6867-4f64-8ef9-5e43f268169a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dd3647-9f58-4db5-8639-990bfea25d97", "sighting_of_ref": "indicator--7f0250b4-2dc7-4363-9bc9-c9653b2e7e34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697bba95-1412-4e23-995c-9ce7b0512b46", "sighting_of_ref": "indicator--26be735e-140a-4eb9-a6a9-ac5adf3956ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb22fda-22bb-4abe-bbe3-82916091c89d", "sighting_of_ref": "indicator--0886d6cb-71e2-478a-bfcc-cf09d702bfc5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99549c0-3e0c-400a-a13a-7e9bd9f6377b", "sighting_of_ref": "indicator--1172dd0c-6eea-4cad-a90e-8b31579774ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a0b011-75c5-4858-b04d-16287a0a9ade", "sighting_of_ref": "indicator--cfff82b5-4aef-4d84-aae5-82d402f91fa2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37463072-ccac-4cdb-8112-1f91c3f6b652", "sighting_of_ref": "indicator--529be6df-af34-448f-a140-421b3f8a72d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48000cf3-063a-42c6-9a58-12bc172faf35", "sighting_of_ref": "indicator--fd1b174b-2e00-4302-8bca-facccd14601d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28626fd-196a-48fb-9c2e-1f00bed2860b", "sighting_of_ref": "indicator--ead162c7-3c6d-4620-8daa-688ffb3b9725", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d10bc2-9f4b-45a5-81bb-8f8c88a1247f", "sighting_of_ref": "indicator--fce05541-98c7-4dde-985b-890264fcb71a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d585d1b-d0e7-4de8-8baf-1b82b3accf1f", "sighting_of_ref": "indicator--2d3a9ef6-d6e7-428c-a021-7cf66458b0a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2830c32-30b0-4eb5-94ad-d28a42200356", "sighting_of_ref": "indicator--13c67fe2-61b3-427c-a6f7-599f444ecbff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e84837-f8ad-47c1-8848-1a4a9e84cc40", "sighting_of_ref": "indicator--0d899c8d-fb16-47a8-bfe1-bbb87bf6cd14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac3822a-a23a-4ca5-b9fe-5212a7fc11eb", "sighting_of_ref": "indicator--e19c8606-3fd4-47d0-8f4b-dca67dfd5713", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7190828e-8306-4964-8314-d3bfafb3d659", "sighting_of_ref": "indicator--4b520a8a-c790-49ba-bcd3-a1660770c50f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad3e628-c207-4189-8640-66c2bb6e6dee", "sighting_of_ref": "indicator--19984488-8d99-443a-ad8b-398913015641", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47590cfa-b4b3-4ba6-ada1-30f5374f9899", "sighting_of_ref": "indicator--cb0c3f17-b0c4-4b96-8b75-6d8fb96cfcad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8844145-6770-4a10-8f6a-bf94c8038115", "sighting_of_ref": "indicator--400784bd-9a97-4710-93e4-5bc7ece57420", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081d4b7b-a631-4690-bdd8-aefe84455bbb", "sighting_of_ref": "indicator--94868971-de9b-40fe-a3de-c30db1b6d0f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65d6b27-fd9c-4174-af78-b01fdac86b41", "sighting_of_ref": "indicator--f111ae6a-e821-484b-bdf2-002f43ef660a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81ed459-4c0e-4d86-9a93-4c94243904d2", "sighting_of_ref": "indicator--d3d1fb30-2d5b-42e8-8733-977620beba41", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9816a57d-b0cf-47ef-867a-3b044612355a", "sighting_of_ref": "indicator--5c2c7d7b-99f3-4d5d-954a-3a892c35e14e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9120b8e-0e2f-42ba-90c2-7b986291bbf1", "sighting_of_ref": "indicator--b97a6fd1-021a-4d90-bcdd-4d972a18eea8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bb60ac-e648-4e1a-8ac0-05c77be0096e", "sighting_of_ref": "indicator--64879a6d-cbb0-4e2a-9a81-730cf031860b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551ad12e-0281-4d9f-8a60-351236fab692", "sighting_of_ref": "indicator--810b397d-3c41-4fc1-b327-4a64b7aff88e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65592c8-2c52-4e75-8c84-8cf598b732dd", "sighting_of_ref": "indicator--3291848b-dfae-4c2e-adf8-35890635d292", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b6888-1b6b-46ff-91dc-fd7cea118aa9", "sighting_of_ref": "indicator--92c3e8e2-88bc-4624-8ffb-4c9130e8c3aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c95300-39f0-411e-aebb-d665d5a14df1", "sighting_of_ref": "indicator--cd07993d-da6a-46d4-9f7d-223237e41a81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d41be91-19c8-44ba-9f6b-26041fca126b", "sighting_of_ref": "indicator--2b901adf-5769-4397-a1f9-2a7455fe19f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc8fab5-ca9a-418e-af0c-7754b886d00a", "sighting_of_ref": "indicator--15957990-b1b7-4bda-80a8-f3eebef98664", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b35e58-a1f0-41cc-a36b-4d158fe5d122", "sighting_of_ref": "indicator--248cd1ff-816e-4937-a60f-4c449599a00a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b0f76f-6c96-495e-a9bc-9aaabfe5530b", "sighting_of_ref": "indicator--990f6057-6262-4c5b-84ac-95aa795ed0f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbebb82c-602a-4470-8552-9e07c428bbb1", "sighting_of_ref": "indicator--c23393b2-2495-4466-ab89-445f01e9d479", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b54dc-514e-47d9-8d57-d36b8d072a90", "sighting_of_ref": "indicator--719f9bbe-78c5-464b-86fa-512efa7dca4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268d7549-8892-46bd-95ce-c94397e75722", "sighting_of_ref": "indicator--5f6e675c-4777-40f4-be80-0db4aadb5474", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc61fbf-5eb5-4435-8d70-c4d9a56e8f6a", "sighting_of_ref": "indicator--1838ffd6-e67c-4401-bc81-c59f927bdc4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d78114a-4314-455b-b7b3-76ee211274c0", "sighting_of_ref": "indicator--9fbdca2f-3b77-4bd2-8aa9-9beff21d9127", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ca7877-2c63-45d3-80bf-7ac4a8e30fb4", "sighting_of_ref": "indicator--8baa585b-9aa2-422f-9d31-a2d84e686bb8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d0b65b-6a43-45ba-9e30-fa722a728fa2", "sighting_of_ref": "indicator--8ee272bf-4f0b-424f-8e06-e106648b494c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ff891f-650c-4d53-a364-aa8a0b93ea70", "sighting_of_ref": "indicator--389df237-40dc-4684-9456-71e87cd50eb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b666b54-a52a-4f48-a7b1-51fc2fc18e91", "sighting_of_ref": "indicator--0e567ac4-5f18-4b98-8d88-85db6dbdf4e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bcea92-3e7b-4d06-8489-cbb95b267885", "sighting_of_ref": "indicator--b715a59a-1e50-49cb-be07-d2d78ec87ee0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463a1559-e81c-4f94-a0ef-288804d2ff99", "sighting_of_ref": "indicator--c04827c4-9467-4348-999d-ee3ca3ad021a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8f78f3-6aca-4184-8012-087280add724", "sighting_of_ref": "indicator--b5d36e77-a833-4519-b2aa-da07bde099f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe1c9e0-0e3f-4def-a7cb-f3a278518a13", "sighting_of_ref": "indicator--07fa7a9e-cc5b-4f6f-bcbb-bfb908bb9b7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8bb6bb-c855-4bb0-bf1a-04627576a853", "sighting_of_ref": "indicator--4eefc0b3-f9e7-4fe0-9b53-3bf156f4a4b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d769c0d6-aaf3-4e21-9e7a-f3d89bc65d33", "sighting_of_ref": "indicator--5ad6115d-06c3-4b85-885b-3fd4d07f8bce", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd52ece1-ebad-4a7f-bb73-95d3c7e45ff0", "sighting_of_ref": "indicator--1d087e35-db6f-4624-a732-e59147f008e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ad8d74-b3de-4b88-8037-4e0c54189328", "sighting_of_ref": "indicator--e283893c-423f-4207-a641-c1450cb47f58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c3b821-635b-4e13-be96-cb7a42a95479", "sighting_of_ref": "indicator--0c943ac5-f047-4a86-81e9-978b09135660", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d7e8e9-5dbe-40b6-913a-9ecd016b70ad", "sighting_of_ref": "indicator--8699f45a-b980-4bac-8539-5c9a5c3fc731", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287d8dd3-9c62-49cc-bd4f-ab9f74f59dc1", "sighting_of_ref": "indicator--a86c7ed1-2135-48c1-adf1-228042c9139b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bf1819-5ab8-425d-b342-c207a7ecd7f0", "sighting_of_ref": "indicator--a8360396-0c2d-4357-86c3-8fcd971df1c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79b8370-685f-4531-bb20-860c3cdd6e5f", "sighting_of_ref": "indicator--dc2ac4eb-3fa8-4884-8a43-6c84229b7cfc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d44671b-b098-43b1-a82e-066f00494218", "sighting_of_ref": "indicator--b2df72ff-9379-4db7-95a0-7de72bde36b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c8884c-d7a7-4a4a-b154-98a8dbd35c43", "sighting_of_ref": "indicator--0468c7e2-648f-422a-a0e5-41f96b7c2145", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f737b4b0-c74a-4d37-aaeb-dd43df0edde4", "sighting_of_ref": "indicator--cff93adc-4afc-472a-86aa-37a3fca3f993", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dab8bf6-b57f-44d5-9708-6b300e722a4d", "sighting_of_ref": "indicator--f968f840-70f0-49c3-a2a7-b87732dfb915", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f6ec4c-de2a-4364-b06b-946d7c55e7f2", "sighting_of_ref": "indicator--1018710e-d7f0-4b62-b990-11a9747a9c98", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561862f8-2353-4715-8ad3-c6d0b89e39d9", "sighting_of_ref": "indicator--ccea6e5d-450d-4865-b22c-df22db06d5b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a977778-0c0b-4929-84c8-ce1a68b8a960", "sighting_of_ref": "indicator--d6388b15-a05a-47b6-af12-4d403c1c1a27", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadd6eab-b0bd-47ca-8a64-a67a3cd10beb", "sighting_of_ref": "indicator--cf4c6056-7919-47d8-a0cf-4636dc0ea616", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f6cdfb-7021-463d-befe-f393c1daa93f", "sighting_of_ref": "indicator--9cbfd294-3574-403a-a7e0-12de7a07ac97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c82128d-94e5-48e3-b626-f9a90811025e", "sighting_of_ref": "indicator--a1d8cacd-d84b-4786-b98d-da229f6fcc21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dabcb28-cc2e-46e6-9a14-7b545baf8c8f", "sighting_of_ref": "indicator--a77507a8-fb25-4937-bebb-5ff635fc89b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f070e1-944d-4fd2-bfd7-331844e14120", "sighting_of_ref": "indicator--e5059209-a0b0-4812-af09-cfa6a73d64a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011e57dc-7313-441e-9177-12e44f1faf9b", "sighting_of_ref": "indicator--16446ca0-c05f-43bd-a947-c53dd65d1512", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685dc042-4561-410c-9770-69a2845b30ec", "sighting_of_ref": "indicator--0c1fd858-912a-484b-9bd0-8c74fa2bc86d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7002f9cd-620b-444c-9647-6e81b054c9cb", "sighting_of_ref": "indicator--56faffd4-3bec-40ba-8ef1-91f789b692ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca0e060-6a6a-47d4-8b40-4a2a25ce4d30", "sighting_of_ref": "indicator--8f6c1bd4-8b5a-4374-910c-c213b3d84040", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2c9e9-c672-44b8-990f-b147a2d66b9d", "sighting_of_ref": "indicator--661a5642-9293-4627-af69-5308a21095bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b06a6b-1cca-4d3c-b018-84ef7ecf385f", "sighting_of_ref": "indicator--818a0b04-7a8d-467c-9ed8-91dd5daed02b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa049a2-eb2f-4f0d-ac77-86efb2dd4479", "sighting_of_ref": "indicator--9a9176bd-082d-401f-b342-e24e370332ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf791287-3d94-4767-b35a-c54092644eeb", "sighting_of_ref": "indicator--bf3e22e0-74f1-4e34-bb59-1bf02784b7a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c445a2c-8b61-4fa7-a494-d9547adafee6", "sighting_of_ref": "indicator--3f8ec1c2-f1e3-409b-8e3f-ddb21eccdf9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49df9a21-1871-4353-9109-54c8c324af60", "sighting_of_ref": "indicator--ce93b96d-e420-4caf-9b4e-ea7e7ff9135d", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c949b78d-97b3-4f8a-88fe-96e8e638fb82", "sighting_of_ref": "indicator--15a2989e-c219-46b0-a3bc-02f4ab347e85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd59a2e4-d343-47b8-93b7-cf88bf554f31", "sighting_of_ref": "indicator--ed22ed51-b8a7-45b0-8186-47d0557ba50a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ca752-5f2e-441b-bd9c-47ac0d2d14a8", "sighting_of_ref": "indicator--eb02925a-7990-47b8-84dd-a3079ff70697", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd34ab-0830-42d1-917c-5a1f4acb6a1c", "sighting_of_ref": "indicator--e4b0111b-8b36-49fe-86a7-13849fda9f28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67368fd-213a-4c9c-a517-5b97b0a11a3b", "sighting_of_ref": "indicator--b5fe4bf1-b030-49a4-ab28-4360164eaf74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf1c545-033f-40ba-876e-a22b98806df7", "sighting_of_ref": "indicator--870bf979-62f0-406f-ac76-12758d02cd21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aee2bc9-f92e-4c8b-b178-d9be2281f93a", "sighting_of_ref": "indicator--371f5ea9-a793-4d37-9f05-d92caa42457d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf97d4ea-dcd2-477b-8a16-f87cc6922f7b", "sighting_of_ref": "indicator--ad1a25b9-0a50-4864-9ea5-0253b1886067", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e67020-d98b-464f-a137-f9047d9dcde7", "sighting_of_ref": "indicator--1f779d4e-2a32-4230-92b7-9ae0ed610717", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb510ade-3cab-4975-bcfa-b2336f5825a9", "sighting_of_ref": "indicator--087a4265-5610-4df8-9445-f7fe105cdb77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57491f2-db58-4e7e-b857-18e676685e3f", "sighting_of_ref": "indicator--f2778818-bc37-45b7-9443-6fbc5405c5a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b07a30-2005-4a4d-a9f1-b0ad5bdef6c2", "sighting_of_ref": "indicator--338b82f0-250a-4f51-a066-5af629709d20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d268f7-0846-466b-a81e-7e496a05606f", "sighting_of_ref": "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc43462d-f8f8-4aa6-a7d6-92286bd1330b", "sighting_of_ref": "indicator--be46a938-6032-4705-a49b-51e0ac084ee4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b93bfe-f6b6-4ea9-a59d-17665d0816fb", "sighting_of_ref": "indicator--633ed05b-330e-4fb9-851f-0f62d881c38b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d09187d-2bf4-453e-85ac-7ede4552ce04", "sighting_of_ref": "indicator--1e45de7e-9cf0-4b4c-9350-ad7a7155b56f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebcafa3-a277-462f-bf8c-26044017e38c", "sighting_of_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d9f355-5de0-493f-aac0-4f0776435bad", "sighting_of_ref": "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2881ff-4bf0-4688-977e-1dcf40bc31c2", "sighting_of_ref": "indicator--edce2503-0968-490f-8bd4-62c4328414d4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3764c2f3-fed2-48b7-a929-b6bf55c337ac", "sighting_of_ref": "indicator--084dff9f-3705-4344-906a-2f286e2da39e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee39809-28c1-461a-994f-f95128616f0a", "sighting_of_ref": "indicator--8eab1e95-9d87-4bbc-a868-1ecf28f0648e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dba58cc-e26e-4a92-8319-77e469bb4f04", "sighting_of_ref": "indicator--1a22ec05-af47-4bfd-a61a-4eef2e974fe4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cf9ad0-caf9-4a82-ab61-29fdb801e8f1", "sighting_of_ref": "indicator--8342c169-e00c-402d-982f-45ed4178397c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbd9348-7b83-4a72-84f5-c4f4eaa1e4ec", "sighting_of_ref": "indicator--c3cfe0a6-ef27-4b8a-b9c8-e8b17c0c090c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817a51dc-3032-4e9a-839d-fbf49d577120", "sighting_of_ref": "indicator--b916ec90-3042-4656-aaf9-e55d75a24d46", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8a8c37-9a1b-4d81-a168-7cf92e2128aa", "sighting_of_ref": "indicator--a99f1955-b547-45ed-b487-0877d806c713", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10b2deb-8340-43c7-b0c2-6e396f1afef9", "sighting_of_ref": "indicator--fe900c6d-5674-4b37-bf69-56f77b77b985", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84767006-ebca-4a25-89e2-be57b60c0e2b", "sighting_of_ref": "indicator--fcf33eba-9809-4a1d-a085-6bf9ff31579a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1407deb-df50-4da2-af28-980cfe8f0223", "sighting_of_ref": "indicator--6187189a-1b6c-482f-a40f-ae1e929a2487", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34eb42f9-fff3-4ea8-a904-2e058ee98574", "sighting_of_ref": "indicator--dcf82923-051b-462b-8f07-749f205426a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ba61f9-3c0f-4965-aad8-7c76f9301126", "sighting_of_ref": "indicator--51ca241d-44fb-4931-89ea-2c9537dac8cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d100cf-8210-45db-8b47-341fcd51e606", "sighting_of_ref": "indicator--5fd904a3-331d-4458-adb0-d6ee035ca540", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787c2802-26be-4f71-b453-a37b4587272c", "sighting_of_ref": "indicator--9e3daad2-7643-446f-9520-508b3eb289cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004bd9d4-36c7-40d5-9b05-f0f4bcbedb01", "sighting_of_ref": "indicator--910f1ec2-255f-43d0-b6ee-e26e9ec8968d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246941bc-3c6d-4e7c-a24c-291dd2167adc", "sighting_of_ref": "indicator--4f0e84a1-3e5f-4fee-a910-4b84e35bf70a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be43cf-fcb8-44d8-b776-e26f45466a89", "sighting_of_ref": "indicator--11b3ceec-2433-452d-83d6-b2b82b132b08", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693e6985-8878-4ada-961c-f0058efedad1", "sighting_of_ref": "indicator--6efdc4c0-f138-4dc5-9486-c42a29a02293", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5c74b-09f5-410c-8b6a-a68cbdbd0e24", "sighting_of_ref": "indicator--57098e40-976c-45ff-85a5-ea24b02370a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d842da-d9cc-49a5-abe9-398318e65abb", "sighting_of_ref": "indicator--40dbe1f6-5c54-48c0-9334-5e2716aed316", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89aace3-b454-4b4d-a7c2-5da2443bea40", "sighting_of_ref": "indicator--51b08277-d8cc-4a27-b63d-1cd80672bb42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df52521-795c-47ca-89df-2cf2af9f2cce", "sighting_of_ref": "indicator--1372e1b8-56bb-4b4d-bdf9-af4b97374376", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fa46ec-1122-43d9-b751-a67dedd23fc6", "sighting_of_ref": "indicator--963f2c87-51bd-434b-a069-ebd45f9f9c75", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec1ab4f-c8a7-460f-9a11-62e78b8e04dd", "sighting_of_ref": "indicator--e3bccf68-2c14-4810-8432-697fc267ff55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f1754-26c3-4b3f-a3a7-292be549d539", "sighting_of_ref": "indicator--08a46e80-915b-4292-9f4c-1ca4f8b32574", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a30a81-76ba-4710-bcb0-95f53ca86189", "sighting_of_ref": "indicator--592bd05a-9822-481c-9af9-050a3caa69bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ceae4a-c23d-4649-bea4-843add3760b0", "sighting_of_ref": "indicator--427478f9-a0a2-4c04-a25c-5a0f40aaa0b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aa540f-d768-4e1d-b7a4-bb2eabf31290", "sighting_of_ref": "indicator--5fbe0c39-d673-4179-9b60-a5eb98da03da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219e17e7-a25e-4f10-86b0-f1c08c549370", "sighting_of_ref": "indicator--099c4ade-1f35-45f9-b456-44e52113f47b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde60aa1-ae77-4bf9-88c0-131926b4cf1b", "sighting_of_ref": "indicator--271a2afc-863b-41b5-969a-662c7b8bee74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f577dd4f-7a37-45d1-893b-a6b9eb238fcb", "sighting_of_ref": "indicator--ed1885bb-1425-4290-b07c-80a7feb6c3bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a28cf-9bbb-4482-8bd3-1541cb15fba1", "sighting_of_ref": "indicator--1ec78234-ea19-4cec-bf75-0b907059e35e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95650fd2-2036-4905-b41b-4ec45f1f5702", "sighting_of_ref": "indicator--4246118f-6b64-4d37-b8c9-d8bdf4f4f8cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a6a73b-ae56-4489-abd6-bebf04929953", "sighting_of_ref": "indicator--8cf8f6e9-1bc1-4ae7-9a61-8b0609e31676", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c6802d-32ec-4b6a-9c7e-f534f32f743b", "sighting_of_ref": "indicator--15f814c0-5f5c-489d-9acb-fa00300664d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5807e818-f526-4715-8538-4d5c9964d0bd", "sighting_of_ref": "indicator--e2fac401-1a6b-4961-bae6-7fd977ee643c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be486b2-d7c0-440f-ad0d-bad3568471d1", "sighting_of_ref": "indicator--bdf11deb-8ffa-4170-aeeb-b1fec0ff0a8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb232a3-b81b-4a86-8e33-237c0e83aad4", "sighting_of_ref": "indicator--bf7b9c42-b7a4-42f2-b295-f8bae1f96513", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804a817c-8788-42d6-abb3-3a9b8775893a", "sighting_of_ref": "indicator--55838749-335f-4d76-bad4-88cfe7442d8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aba513-9e68-45dc-b1f7-c2ee3447f698", "sighting_of_ref": "indicator--651fa742-7a00-4c95-8e46-65661038e65d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43790f9b-d4ad-4e27-9533-e7d7f175d703", "sighting_of_ref": "indicator--df436d65-9e01-4e2c-89ac-5673e89b3608", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b3da35-618a-42bf-85c5-7dd10a113edb", "sighting_of_ref": "indicator--7f2cd049-e7d9-4a53-8018-12949f0d2d81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8b70b8-8890-454f-9c6b-c7a27d62c116", "sighting_of_ref": "indicator--5e21fe4c-f62b-469c-a8b0-38ac21a8bc5c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a4ae1d-0487-4537-b685-f91202d08dd5", "sighting_of_ref": "indicator--2a400e27-85a5-4784-ad7a-3fcc9a65a299", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aec3b0-97a6-407d-81c4-e40d46bc1486", "sighting_of_ref": "indicator--91893f96-ee3f-4fe3-8564-885e67ca57b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd70682-451b-410a-90b4-602969bdf406", "sighting_of_ref": "indicator--bd7e58c9-a7f4-438d-85cb-815f5a567257", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4129c9ff-03e0-407a-95d8-bf0fee9c476b", "sighting_of_ref": "indicator--44f626a7-869a-4184-a220-83882abe4695", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6b3529-d1a8-4ef8-9a8b-925d4a057342", "sighting_of_ref": "indicator--9924071c-8f91-4520-b0b7-8bea2aeca90e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b56a8ae-e981-4c93-9602-9ba21bf699aa", "sighting_of_ref": "indicator--6d4a825e-ed14-438c-a093-706f9e7eaaa3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3eb9bee-f63a-4505-9aa1-9d5c0c336623", "sighting_of_ref": "indicator--f07f1ee8-a4f7-4a77-9bba-302f1be3b482", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eabe689-ef2a-42bf-b424-5ea7817ca24c", "sighting_of_ref": "indicator--9e765824-cbd0-47c9-a560-0cdd9aec304e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f363ea8-3154-4ea9-ae29-0fcb9580089d", "sighting_of_ref": "indicator--8cf12e79-8b31-46b7-8f5d-f01c7a7e31ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7054d4-d087-4f08-b0ce-8dd571ab85fb", "sighting_of_ref": "indicator--6cbe822c-3aea-4657-980a-380a9ec7cf1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a690ab-874f-4dd8-9e90-6a43c16bf75c", "sighting_of_ref": "indicator--4d6bd1f3-4876-4a87-8f63-d5b107d531ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebc7e1d-b75b-43d3-8db4-2ebd783ae545", "sighting_of_ref": "indicator--fa87308d-686a-41f8-9053-0dc906980b19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf87b60-0529-447b-8b5f-719d4a01cac0", "sighting_of_ref": "indicator--834aa40f-dc69-4c01-b52a-f085a3d2e85c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bb038e-8741-494e-a14c-1729dc7d6dfc", "sighting_of_ref": "indicator--312f794e-c484-4a8d-a13f-b87f1a551a17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaf6a29-6ac8-4ca3-835f-184307cb7d0b", "sighting_of_ref": "indicator--f4a1fd84-0470-403c-83d9-a949ed4fba92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08a3c44-232f-4afb-a822-accbdc8532db", "sighting_of_ref": "indicator--1a424a0e-8938-46a2-b812-d2f59285e80e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84946ac3-42e3-4aff-99e4-59901a218011", "sighting_of_ref": "indicator--157a3118-54f0-4026-bb42-ed8c84762793", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccad974-4406-46ac-931b-2d4f1e239c89", "sighting_of_ref": "indicator--b32fcb4a-29ff-4569-9b52-be7afa85582c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354bc3ac-3251-4fcb-ac14-20de31fc969e", "sighting_of_ref": "indicator--0dac48d7-253c-4a3e-ad8e-23b31f44e6c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8f8041-1b8a-46d1-9e9e-734df6e0ddf6", "sighting_of_ref": "indicator--6596286f-6150-48dd-837f-630550a8d6bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a1dba-0392-4c3d-af6e-b520b386c3c8", "sighting_of_ref": "indicator--cf8e0c48-db8a-4c14-88fe-df12771f6aa7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571986e8-04bb-42cb-a1ed-5bf901e8a4e7", "sighting_of_ref": "indicator--4294b089-52b6-4874-959a-d9a28ceddead", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c585d0-b86a-46f0-ac52-0470aa2ac761", "sighting_of_ref": "indicator--6c52bf53-8aad-4091-a1eb-044a56521d4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c51b227-9223-4eac-882d-02fdf347e9af", "sighting_of_ref": "indicator--5bbb9572-da20-4bde-9161-93c80c982f25", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733cfb44-f6d0-4d48-9d7b-2502ba9f39f3", "sighting_of_ref": "indicator--ae2878e9-6578-4ffa-94db-e625d6e28b65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4dec6c-1bcd-4800-9901-a0ae686271bd", "sighting_of_ref": "indicator--4c06f009-7045-4078-8601-72f847283b6a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b7a364-4562-4194-80b4-97028e68deda", "sighting_of_ref": "indicator--c24ba0d3-d463-41b8-b9ae-5a7ee84567de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec331bf-f31f-41a5-bffc-447888619563", "sighting_of_ref": "indicator--e6669a9c-b285-4bb5-aed3-a0b26c31ef22", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206f8fdc-0fc0-478f-8b91-78dda5758499", "sighting_of_ref": "indicator--8cbe0c75-abce-4125-b6be-e7f2d80e395c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4201c1-73b8-4b62-8507-80b42d498a06", "sighting_of_ref": "indicator--a6ada130-f368-46cd-a6db-12942d113cef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb266be-17a8-478c-8851-f3135e37ac9e", "sighting_of_ref": "indicator--a43c2cc7-0a69-47ed-90a3-2c02463c7777", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f46b2e1-0ac7-4935-80b3-1497ab7f0849", "sighting_of_ref": "indicator--b9dfe81f-c820-4c40-a916-568b0e6ab149", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b035cea-0686-4523-9c5b-23b55d30c97f", "sighting_of_ref": "indicator--416bdd24-1612-4ff3-a203-e17e5439d376", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd03bfc-78b7-4336-8d35-1f7e800ae36a", "sighting_of_ref": "indicator--faae18eb-47ae-46f2-a6cb-30dad20d8e8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ada84e8-7752-441e-826f-d158a41b493e", "sighting_of_ref": "indicator--4f01e909-f718-4695-9d21-8b4a44d33a96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36224b46-a5eb-4cc5-afac-a4ad93d6916d", "sighting_of_ref": "indicator--faef603f-49ee-4eeb-ad5d-8a93dd2570e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7bbe4b-3937-41c1-a765-ec65a8da9fd5", "sighting_of_ref": "indicator--02fa9af5-ec34-4bfd-ac9b-70be154a1912", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2334fa41-d9af-47b2-8ba1-3d5706a8191b", "sighting_of_ref": "indicator--0260677c-fdbd-4c1a-aea1-937ec3f6b07c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c2f19e-b703-454f-8135-b85dcf6ba4f2", "sighting_of_ref": "indicator--4cdb3d4c-4d47-4e4f-baf6-a46a27a31948", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5edd0b3-bbb2-47be-9f2c-eace086912bc", "sighting_of_ref": "indicator--fa36bc58-830c-4a65-815c-36cd0540087a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1d58f8-f754-4529-9e6d-d5f05fc73eac", "sighting_of_ref": "indicator--2a4f623b-15a0-4685-82f8-95a2b2935f7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bb3f12-5967-44f4-9ba6-d35e76894686", "sighting_of_ref": "indicator--9c7edb4e-ca85-4d66-af12-dde6fc8e27e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86897249-afa3-4151-bb7b-9118d32aeb1a", "sighting_of_ref": "indicator--8062a73d-16a9-467c-ad72-2926ff5e0062", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c4ad79-fba4-47d9-a6d4-966dc2fafd60", "sighting_of_ref": "indicator--2e80c4a3-90e7-4a8d-84d9-5b89695a4dab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b42a6e-92b3-426b-a8ed-0dc279e5bdb7", "sighting_of_ref": "indicator--c8c430b7-9f16-4c36-a48e-cf5d8d335f67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310ad96d-e8a2-4a84-aaf5-85274a8370be", "sighting_of_ref": "indicator--8aa3b905-5f95-4b3f-8894-b6ca1549bd7c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5776c0-0646-4165-b609-f4ae5aa6b27c", "sighting_of_ref": "indicator--e2870a12-37a5-47cc-b61c-5a562a7716f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f25efe-2dd3-4aae-8919-8db15e08c3b6", "sighting_of_ref": "indicator--b5abcc50-60db-414e-a5c1-aca9a4ab485f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86405f31-7a8e-47bb-91ae-2f975c9b3966", "sighting_of_ref": "indicator--32db010a-8794-48f9-8bea-06733e434ff7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209ed92d-d3cd-4de0-8c18-d6bf96d6f1b1", "sighting_of_ref": "indicator--59ae7e88-a5c1-42ce-bb98-8cc1c57b1fb3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4504e23b-34ad-48dc-9def-f4daa08fd85c", "sighting_of_ref": "indicator--75870363-be9a-405e-9067-b9c5118cd12b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e05ea0c-df13-4834-9992-e0932a8e1bc3", "sighting_of_ref": "indicator--05c3bdcd-1860-44d4-b5cf-c4792310b7eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f9e849-1d46-4852-a537-83858e4acc59", "sighting_of_ref": "indicator--a96fc882-2011-4f0d-9102-79a24c8b9761", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9819ea33-9f66-4cd7-aaf5-e6a0659cb0f3", "sighting_of_ref": "indicator--fa2e8acd-be29-4c33-99b2-080dd332d9a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8712a3d6-89de-4395-9be6-cd9a6eb16a66", "sighting_of_ref": "indicator--2924f7ea-4d8c-4171-bf33-20f75778844f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3256a5e8-75c6-4705-84be-3e032852c261", "sighting_of_ref": "indicator--e2c7223f-d8cf-46ac-b6cb-f9d2dd196f5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4307c4-0036-4845-b39d-8f4852eedbd9", "sighting_of_ref": "indicator--5ea63717-1892-47a3-a7e7-95c435d21545", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247ac0f9-84d6-4404-8489-dc619afa67c9", "sighting_of_ref": "indicator--f657351a-8411-4a0e-8fc7-351d37ad8ae6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf18e1a-3e35-404a-99d8-182ce6eaccc6", "sighting_of_ref": "indicator--f48ec8a3-e185-48b6-86bf-9b08f6a3bf64", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8ebb5f-8047-4dec-8c6f-932ff480b83b", "sighting_of_ref": "indicator--cb03b049-6c3c-485c-b74c-6b47ff3c92cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3521cbd4-125b-44d4-b406-40f2ca92b9a1", "sighting_of_ref": "indicator--9e6f1446-9357-4517-98a4-0d8c85c836e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc82733e-4fe7-46a3-9df3-50f37377c02c", "sighting_of_ref": "indicator--fbc06b66-5581-4a9c-828c-4cd1f8991b7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ae171b-6018-43f5-b8cd-598285d77440", "sighting_of_ref": "indicator--3cbc2c9d-4398-4ba9-83e9-aa326e2c0051", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ff6ca6-68c5-4ac6-a015-8e61b3b7412b", "sighting_of_ref": "indicator--b16ef03c-77c2-467e-8112-d3612070c76f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a45d9-c1e3-4d4d-99e1-d0d40148842b", "sighting_of_ref": "indicator--b0917a68-1d6c-470a-b226-ad188b8aa850", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d25aba-e91c-473b-9881-160bff9afa70", "sighting_of_ref": "indicator--c647aced-2b65-44ee-a680-5a58dd95c782", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60943e43-68ff-4f2b-b6b6-090d3a8a1f0a", "sighting_of_ref": "indicator--4889dfb4-26e8-4122-a5c0-6fceacfd981d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb62e72-da43-4d0e-825b-f137098174cf", "sighting_of_ref": "indicator--b472069e-96e6-4cef-bbb5-f8c97b98a9ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d54a89-4ca5-4ae6-b930-9069bfa052af", "sighting_of_ref": "indicator--6c31ffea-18e7-4c21-bf8a-524ca1860d0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d020383d-38e1-49b1-9f91-f90f8e0c8f0c", "sighting_of_ref": "indicator--ae4b1427-9e0c-4f05-836a-3c14f3a047a4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8137b4a-c7b2-4122-b74e-82c49996b4b4", "sighting_of_ref": "indicator--f5b7e5ad-ba8d-489b-8553-542c23a12755", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6136ea73-beee-4397-8849-fdd9d610e2e9", "sighting_of_ref": "indicator--a311c9b5-be63-4137-9318-2d0ef7ed6f42", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba0c3c6-99cc-489d-b9be-1e3cf8ae7f62", "sighting_of_ref": "indicator--e96b9ec7-a85e-4516-b07b-c468bb881952", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078f8536-4bee-4348-b488-7cc6c0922eba", "sighting_of_ref": "indicator--b5b717ed-391d-462d-a082-c9e60c87816f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7f5d49-9cdd-4a28-98b7-e8d4c230868d", "sighting_of_ref": "indicator--64daabd5-a6c6-41ab-ba18-9af9443ee985", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2f1bff-52a1-49f0-8771-8908e75e1ec6", "sighting_of_ref": "indicator--d5785315-d9c6-413b-8154-b185f439396b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d55744-826a-4c1e-970e-b96a32f6ef0f", "sighting_of_ref": "indicator--091737f7-faae-4d0a-9a06-4bda9d672c47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78a1f26-dbe7-4c47-8aec-177ec06dcdc5", "sighting_of_ref": "indicator--d9763afa-c3f5-4f55-9660-2bcd49e66d55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fecfa7-6fa7-4be3-9dce-66f5c3ff6eb9", "sighting_of_ref": "indicator--ec139ccd-4a6b-4bac-ade0-dcef4030f9c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871ea910-4aba-41de-bdaa-9eb383d4ab5b", "sighting_of_ref": "indicator--e0de3fcb-935f-4868-a5f5-0e302ea36e86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345a1959-e521-4e2d-8670-e1f8e3dffa0c", "sighting_of_ref": "indicator--2718c82e-0b52-462b-abe6-020255f7f0b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a828fc-92e3-4362-9dab-c6103b4a6954", "sighting_of_ref": "indicator--48d82954-8d99-4ab7-9864-b9f868aaab62", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e6f336-8a33-4b41-b3cd-cd60f34d6f48", "sighting_of_ref": "indicator--27e269ad-3c39-41be-b5e1-50fa268adb81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831865eb-0d62-462b-9fd1-2f02edd06c18", "sighting_of_ref": "indicator--42d917cc-37d3-48ae-979d-c0f5deb3f351", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c5133e-11e5-4d12-ae65-64b52bcf6dca", "sighting_of_ref": "indicator--f91ac9e6-a2db-4318-af3d-d36580d89dba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fe023a-e0fc-413a-8964-707aeeab95b8", "sighting_of_ref": "indicator--e8d1b003-480a-4c85-b776-9bd6454c4535", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f82bbe0-c62b-42f3-907c-8c627a92b41f", "sighting_of_ref": "indicator--1744b95e-eb81-453b-b233-aaa249769b84", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88248221-bbde-4ba9-9c01-520f7b48a0e6", "sighting_of_ref": "indicator--eb7c1fec-fe87-47d4-98b3-2dd0308d0e74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2380b2-7755-4bb9-880d-641bc55c28a0", "sighting_of_ref": "indicator--a9407f79-9a70-4100-ab3a-e82b8e4c3c9b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92447723-334e-4c75-8375-eb097045751c", "sighting_of_ref": "indicator--3d6c9048-fc37-45d0-a7e3-33e359451478", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32818ed4-f206-4a5b-bc2d-cee705cee099", "sighting_of_ref": "indicator--0f34fcbb-a082-46dc-98b3-05680d5997c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89deef0d-ceb2-4d61-951b-5e715da0fec8", "sighting_of_ref": "indicator--383ac164-d7c9-40a4-95d3-612b6d7ef316", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b619548-7555-443c-b895-bb9644423344", "sighting_of_ref": "indicator--5a505056-f988-4de9-9028-a3d2aa45b6a4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddf0d5d-5355-4876-95d8-8e1d47d5c5ac", "sighting_of_ref": "indicator--096b617f-cf50-4c95-aad9-2d676e81a37e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec9157b-a19f-417b-bf8e-986567e69f66", "sighting_of_ref": "indicator--7bbe2428-e4aa-4dd8-925e-eff8fcbcad42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcae7883-b4bb-47be-aad8-bddb23fc7407", "sighting_of_ref": "indicator--aca4f231-03cc-405d-af95-0d884d87c3be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba888d-870f-4089-8db0-9e900103c31b", "sighting_of_ref": "indicator--42cfe00d-b964-4822-b133-35235ae8e14f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec06900a-05e5-4ffc-b825-ce1411804134", "sighting_of_ref": "indicator--641173c0-4156-4a8d-8165-9a2809cbaec4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c751fb41-b34c-47ff-b5ef-b5daf95bf1b0", "sighting_of_ref": "indicator--0f45d0d9-2edf-4eab-a326-05086ebc240f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f7a904-101d-46ef-a058-447b171d6f56", "sighting_of_ref": "indicator--8647caca-7ed8-4b3c-b125-de692f01c671", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae53047-c0d1-4885-a8ed-6121ef735d29", "sighting_of_ref": "indicator--a4751e00-61dc-4f9f-bb3f-b4646b5d7deb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e16929-1405-473f-a1e8-68585cb4010e", "sighting_of_ref": "indicator--e43f1010-42ba-4482-9c71-7564d5c7a59f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8686d372-85dd-484e-90b1-f24dcf9e5546", "sighting_of_ref": "indicator--74f165eb-75aa-4263-983f-c84f96ae9611", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eda6aa5-05b5-4eaa-9390-911f3b684733", "sighting_of_ref": "indicator--5491fb8b-4452-4884-a9d2-141be3d40950", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a7734-7d44-40c5-96a6-662121017bff", "sighting_of_ref": "indicator--6077a79c-f3ad-42ae-9669-63193f4f4fc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccf27f3-81b1-49df-a4ff-bb62c8033ef7", "sighting_of_ref": "indicator--8e549730-469a-47c0-be19-a23ab7327011", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969c4ac0-1263-4041-806f-d293fc77052b", "sighting_of_ref": "indicator--b3530eb8-1326-4349-adae-92fab621fa13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c40380-08c2-4672-a94c-9aff8752038a", "sighting_of_ref": "indicator--f34b3dde-f1dc-4611-bef5-5b899aef3728", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8666f933-80ea-4fc2-a0bd-ad77cc895f8c", "sighting_of_ref": "indicator--d3ad37e0-a298-4082-aa09-d62678c73092", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82256c51-b10e-45fe-a4c0-9058ddc24b08", "sighting_of_ref": "indicator--01e1c09c-e82f-4575-a189-1d8817581b85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fac87ab-1045-4b0f-a2d7-4b70f566f2ce", "sighting_of_ref": "indicator--74bf96bd-4062-498e-9cdd-4ad59ef95d55", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dc912c-ee43-4b04-b4cc-c00429d7474f", "sighting_of_ref": "indicator--953fa284-c901-40a8-ac2d-5ee413815b94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a38aefc-cbc1-4026-8ce7-43c2b6017ae3", "sighting_of_ref": "indicator--99dcb6ea-7145-470b-b3b5-fd74d3a82be0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd48783-1fab-4578-9210-0b25eeea5804", "sighting_of_ref": "indicator--6d373567-0ee5-4654-99f2-a7988e6cdfa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930f48a4-e471-4568-bfe9-9e4fdd5d861f", "sighting_of_ref": "indicator--d5551daf-9d7a-412e-a770-046611af9820", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8dabb3-242f-4785-9c2a-0172faeba07a", "sighting_of_ref": "indicator--1898d972-fe0d-4851-b964-d7876f6ee4e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e638f0-ebb8-4356-998d-660a4cd716a9", "sighting_of_ref": "indicator--fd5091e1-e85e-418e-be25-efca54bcdfd1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fb1d78-ae3d-4661-8c4d-e803acb4fd99", "sighting_of_ref": "indicator--5d566e1a-128d-4074-bf46-d9f3e05b264c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081301ee-4745-436f-9014-85923881e8dd", "sighting_of_ref": "indicator--8b317fb0-fe4d-4832-ac8a-9246b26713f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae33c9c4-1c8d-4173-b22b-69c2e95036da", "sighting_of_ref": "indicator--95410f17-5418-4930-b744-8bf07357f3a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927df763-b31e-40cb-be66-cbc67bd68b0d", "sighting_of_ref": "indicator--36511c06-7775-4f02-a525-c8e8cc117561", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3eb898-3936-4824-8fa5-ebefabd016bc", "sighting_of_ref": "indicator--2c72de16-d9d4-47a3-afc8-dc6777eb3c19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd565ec3-16fc-4061-b8da-ac1e7e106530", "sighting_of_ref": "indicator--de5e4060-37b3-4af2-8e43-22a471a78dce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414783f2-6876-43c2-b9ba-717b55c94d3d", "sighting_of_ref": "indicator--46b4a54d-8be5-4177-b743-698c53fc2d52", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea7814b-284f-4f3e-98e0-0420e05dd60d", "sighting_of_ref": "indicator--b7d80ff1-0e19-4c83-bcc2-f8e13b0573df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856da4f5-d031-4686-b73a-dca1c2fb9ed4", "sighting_of_ref": "indicator--af5e347e-6401-4141-95d8-b2628d7d8c4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0794376-1fe3-4281-92fd-207b5783bda6", "sighting_of_ref": "indicator--7d348426-d164-46c2-9623-1395f7770df6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fa3a29-709a-4fe1-b8b6-ca0313f4a8c5", "sighting_of_ref": "indicator--e90e78a4-0216-4b52-a7ec-1a21ec6d5b81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3e6ea7-f5ef-490e-9592-3149ebb90e09", "sighting_of_ref": "indicator--520b76c6-6cf5-490e-8ecc-c212dd0aaaf0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec3ba03-241c-44ef-97c4-f4538c1047f8", "sighting_of_ref": "indicator--5a1df94c-64f5-450b-a166-7937a3eaad6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a3848a-640d-4be4-ae11-4256420911bd", "sighting_of_ref": "indicator--ec10335a-8f13-4f46-a4ba-9d13eef847da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fd55b8-f309-4e71-8f15-6d94d391dc23", "sighting_of_ref": "indicator--148bf5ae-6bfd-4a23-9b38-671d307e69e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41119b72-698c-4901-80b2-f206ea2183a9", "sighting_of_ref": "indicator--73d4e01c-0781-4a68-9152-11a8bf97e8b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1f6778-44c7-4dfb-a9ac-5dc420b332d4", "sighting_of_ref": "indicator--732cb9b8-a044-4d46-a9b4-3de24ea7cb4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6852471a-4aba-4762-84e7-3160d4fbad78", "sighting_of_ref": "indicator--33193ea1-49e7-40fe-a2f5-99e219aecec0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa91418-b1a4-42e0-bf16-13894ebf9402", "sighting_of_ref": "indicator--7c423dfb-52ae-4277-92fa-dfe5a0b09601", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84886e8a-04ef-4e55-af0e-a5e10c3cb1ba", "sighting_of_ref": "indicator--a82c697c-44cf-43cd-becd-ea832a1ea4f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ae3c1-ecab-4626-a539-f9b7740d85ad", "sighting_of_ref": "indicator--f7d0e7e5-5b10-4429-b84c-bfcf01e3e1a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6df360-427f-4dc7-acb9-75594088c7a1", "sighting_of_ref": "indicator--0a06571d-c1f8-4b81-bad1-20175d030e3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58282e82-b8e0-4e93-836f-dcb02c8ee802", "sighting_of_ref": "indicator--b3c822f3-ef8e-4423-b2d4-f77ca07c45ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25b6438-d4dd-4ff5-b967-d70fc5b92519", "sighting_of_ref": "indicator--c60cfa00-803f-46ae-bce0-dca2bf1d0d9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1400bfb-81ff-4629-aa8f-ff30312771c7", "sighting_of_ref": "indicator--44e29043-bd90-4b12-a842-e3fe076bdd9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68695f11-60a8-4200-8ffb-b64fa7ad8ff4", "sighting_of_ref": "indicator--ed3e5474-63f4-4634-8232-e10243dc2873", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b6e600-f9a1-4204-a3f4-ec62591a80e5", "sighting_of_ref": "indicator--07b6f372-4977-4d37-b7f4-e3f09a0720f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780e2592-75d4-4c18-ad01-d1bd11e7c2ca", "sighting_of_ref": "indicator--1f5bf499-9cb9-4616-898c-5ca45fcf207d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9422c922-0ce0-4cdd-8320-bd625ce4115c", "sighting_of_ref": "indicator--20092475-6b10-460d-bb83-7bd81cf0b047", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad313adc-e252-40c1-b39a-f49face2a571", "sighting_of_ref": "indicator--b6c7199e-ed17-4939-a860-7f8d5159b5f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baffb732-376c-45ec-9637-c1c408d484b1", "sighting_of_ref": "indicator--b691f004-dcbb-47a4-bd0c-a2c58cf69f11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fce430-3e53-4f5d-858c-8215096498eb", "sighting_of_ref": "indicator--39640c64-7f9d-4c88-96ea-10095f13f4ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa1da25-b381-4351-972f-14afbedd9293", "sighting_of_ref": "indicator--53e69355-b824-430d-9e66-6381ec1ed3d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af44961-eef4-4335-bdc5-68f94120b560", "sighting_of_ref": "indicator--9a559f43-9eb8-480d-a805-6b4590e0e58a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf8c5e-8dd8-4bb1-b090-13bb0f1de198", "sighting_of_ref": "indicator--fd1c28e3-0705-4d43-bcd2-e82fc959d93c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef48804-bbf8-44c0-9c68-b491199e4062", "sighting_of_ref": "indicator--803cc831-3666-4fa6-a5e7-e827c1b75947", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340d3c83-2fed-42ed-a4ae-aaf4ba73021b", "sighting_of_ref": "indicator--c3d121f4-2fd7-4b0c-a6f6-6a704b2dd763", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457c493d-9f5b-4c99-b414-c2522bd9a658", "sighting_of_ref": "indicator--488a74cf-f144-43a1-b9c5-787b84c1612b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c0896f-aa1c-481a-bee5-285c04b7fb89", "sighting_of_ref": "indicator--7d04642a-5984-4d14-bcfd-4631525b012a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f9b542-76a6-4d2f-b33b-79758deade2e", "sighting_of_ref": "indicator--183641e5-7b9c-426d-996b-e017aee1b712", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87df8324-3afa-414d-b5e2-a038cadc464d", "sighting_of_ref": "indicator--f4fc0d78-33eb-43b1-b647-1612b81ea9b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94005b20-ea23-4d38-8b30-0d6f6ba03d43", "sighting_of_ref": "indicator--f32a970d-7cfe-4c5b-a168-5d3bf2792631", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab4423b-7eff-4a10-828c-8542d4ab4a68", "sighting_of_ref": "indicator--3a872345-1595-4a36-a91b-c0eeae65d6e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51876b8-6aed-45a7-9065-28df60dc67fb", "sighting_of_ref": "indicator--64618e85-3f22-4670-979c-b482203f5425", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06556d4-014a-4e0c-90cb-b7d3b3d225fa", "sighting_of_ref": "indicator--4457ff0f-5a9f-4a7e-8407-c36834bb56bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55dbc46-2cf8-43a6-811f-41e99f4ec249", "sighting_of_ref": "indicator--73b3accb-92c8-47a8-94f3-81e0ae9ab24f", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d406e04b-6ca2-40c2-9957-f4b354205690", "sighting_of_ref": "indicator--9f5918ed-b3fd-4f06-beb0-c7e7f91b351f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb38f707-eb20-4070-9e00-48f14c351ab7", "sighting_of_ref": "indicator--1b49ddd2-310e-47d1-af45-7c9ee43c89a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897ead90-67d7-439d-991c-24ee422bd565", "sighting_of_ref": "indicator--f4bb74be-2aa9-4b0c-bb72-f94039866a5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea828fa-fe9e-4640-9897-1c0ed2bdc7bc", "sighting_of_ref": "indicator--823b1b7d-4a82-4e33-977a-1825de7602b6", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce5f508-71be-440f-9a59-5d914d4e62a8", "sighting_of_ref": "indicator--fabb5044-6a46-4c01-b6b4-fb3b960abd19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1134d56-fe11-45fb-9627-680337816cd7", "sighting_of_ref": "indicator--48349271-3bab-40c8-8120-9372a309bbf8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6edabc-a4d8-49fa-9598-9f5333884473", "sighting_of_ref": "indicator--35628704-1695-4955-95c6-7de5f00cf7a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678dd0c4-5ba1-407f-ac51-3280b5a6b28e", "sighting_of_ref": "indicator--d8e57477-7468-4365-af16-8224742f4996", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c00fadd-c567-4a43-901c-7e054746ef00", "sighting_of_ref": "indicator--10ca3f53-bcc9-440b-b025-ff2eebf8ea74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227316de-8f27-4877-bfac-8cefff16e9fc", "sighting_of_ref": "indicator--868a6f4a-40dd-49bb-a8a2-279526bee2de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c4bbee-a5e2-4e32-9e69-fd2a6df07bb0", "sighting_of_ref": "indicator--e2bfc4a5-79cd-412c-90d4-4a5404ae5165", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5d02e8-02e2-4bd6-b312-d6fa26fe466c", "sighting_of_ref": "indicator--ef1f6a75-026e-4788-8b9d-739737947e44", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8237a03e-f6e0-4d9c-b9e2-ece4f9dc38ba", "sighting_of_ref": "indicator--0e8769cc-bc67-4247-b4c5-24a60a27a5f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ff2db9-5464-4a47-b003-42a7ec77cfc9", "sighting_of_ref": "indicator--c88bfa99-c9fa-4dc3-9cc8-b2e99a9598b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768712e8-bac9-4343-933f-b692009d7fb0", "sighting_of_ref": "indicator--91ffa2bb-30c4-47a1-b8a8-a4fa610fa193", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9000e3-123f-4d33-b2cc-1731fc477be4", "sighting_of_ref": "indicator--9b7b980c-e816-41e0-b132-dfcec46dfe66", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f350c4f5-d35d-46c1-adc7-8b4f677174ae", "sighting_of_ref": "indicator--582e7a06-cfee-43aa-b194-f8ad2050dcc4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13719a93-b2fd-4bbd-8338-574b60c99efd", "sighting_of_ref": "indicator--01500acc-0bcc-4f1e-9e7f-dfa57fcf32a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ac6af1-6185-4452-a3fb-47d842a51e35", "sighting_of_ref": "indicator--84be90d3-4bbe-4cbc-9457-690128574e7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5550443-df51-4379-9a14-42cfe4800a00", "sighting_of_ref": "indicator--b488b574-f67b-43df-aa83-87ca606787bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea12fc-46bb-4107-a456-e70b589656e0", "sighting_of_ref": "indicator--9526bd24-b551-4416-9045-920e909ad36c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08147a80-9f18-4032-9597-88d5bdd3f72d", "sighting_of_ref": "indicator--42d59d7f-3a2f-4055-953c-958b5cbfd38b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fd492c-b672-458a-af78-03d52c0f2496", "sighting_of_ref": "indicator--f1daedf6-2a81-4264-9c0a-7fd32416fc27", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da0598-287d-4ff4-92a5-b46a2719fbf4", "sighting_of_ref": "indicator--f779236a-17e8-4707-b64d-08eda9c8c4ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528f1ef5-dcc2-43a7-bb8f-25714872933b", "sighting_of_ref": "indicator--88749efc-463b-4018-a051-c7733033c093", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79f2c5d-9df4-4378-afd9-246cbd6cfb13", "sighting_of_ref": "indicator--5b387c2e-e89a-4c74-852e-2f29e78c3132", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b359b475-6f64-431b-a529-6193c7e8b9c4", "sighting_of_ref": "indicator--a9ea02a6-13d0-4809-ba91-8d4d67921f01", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1b7860-93d9-4cf7-a664-39f079501c82", "sighting_of_ref": "indicator--fb8c7661-107b-4e92-8305-7dde89e7345e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354f753d-3644-4f89-b8ae-8d11d874f15e", "sighting_of_ref": "indicator--ee5aadb8-6bc9-4cf1-8776-d1ceb2ef81e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed936fef-9d57-43f4-9e57-0ecbe16d244d", "sighting_of_ref": "indicator--b453d676-8784-4249-950d-729a1d395098", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b724fd-a0af-4b5c-a4a6-0f52278eb6db", "sighting_of_ref": "indicator--fe681497-de41-4a55-b3ea-4710328542e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c054400a-26b2-476a-a54d-012bbed97b1e", "sighting_of_ref": "indicator--e7e8d3ea-a788-4f11-ac1f-f55a606101d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167ae58c-6d38-4d53-bd76-8f9e8c6498c7", "sighting_of_ref": "indicator--3b6dae98-8f40-45ad-ac72-5e9d618a3cf4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7185426e-b804-453c-8f9b-fa3350fe8485", "sighting_of_ref": "indicator--6ae84526-c9ac-4a26-8421-0fc88ad24d03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb64cd4-07af-4008-b653-6b753ae362b2", "sighting_of_ref": "indicator--acbedf5f-1d29-4518-9fa9-aad121627ed6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f174d235-5112-46b9-a4c5-3d3abfe0538a", "sighting_of_ref": "indicator--c9dfb941-4d6e-41ad-8c52-25d78141345d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dbf80d-4f8e-4e0e-8dca-fe75bf44b884", "sighting_of_ref": "indicator--6d9280b6-977f-439f-b49b-30888c0dee44", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd454bc-33ab-48a0-86df-c285ed92bb49", "sighting_of_ref": "indicator--7a40f4f1-4cba-4684-85b0-13c39cb4f0d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f563b7a2-85f0-4cb3-9070-624cf981ccb6", "sighting_of_ref": "indicator--757d632c-dc6c-41db-a922-66ecf9b0acb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169a5071-7718-4f5c-95c8-5304e5a9c491", "sighting_of_ref": "indicator--3ac4129e-7a97-4c39-87e9-585226242c9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d536f-bd72-4877-a66a-42e53812b148", "sighting_of_ref": "indicator--098351b5-b268-4b23-ae85-9036d667d321", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aadcb3-1420-4f9f-87c7-ae70fa92540b", "sighting_of_ref": "indicator--e67cce88-5744-45db-aa5b-ef71097efcee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6590baa1-1e79-4a3f-a11c-37e9add95d34", "sighting_of_ref": "indicator--ed312d4b-ed37-4be2-991e-d6d1cc391e6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be97dbcf-679f-4413-ab4d-f44c9fb2a42f", "sighting_of_ref": "indicator--8d1a7d5f-4da6-4f73-b82b-2048e44c90fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef16443c-2ca6-4199-8e3a-a277fe8fe563", "sighting_of_ref": "indicator--c796895f-63bf-48e6-a207-6cd65c81ac07", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfff06e-453d-4518-8a06-f8620ddc7bcb", "sighting_of_ref": "indicator--a3cd53c2-3966-4607-a005-21dcebc936ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bccd47-19f5-4641-8a08-0aac65f4a953", "sighting_of_ref": "indicator--bb6e9901-5f5b-472f-9e2e-31d419aadfe5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d083d82-600b-439a-8c3b-c978de6a9d3a", "sighting_of_ref": "indicator--ec7cf2c3-e75f-4dc0-8d91-d6d299dc69cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e469d4-f793-4bfa-a51b-1f0eb746f2ba", "sighting_of_ref": "indicator--0b0845f2-e874-429a-b382-e80cab7136f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee0e8f6-6574-48e2-8e1a-19a53753de6c", "sighting_of_ref": "indicator--bd7f5f59-61c0-48f8-a0f0-c9873c33030e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e32eb8-32d3-4850-9098-745c1e3988db", "sighting_of_ref": "indicator--728f1cf5-6a1a-4e90-8af8-67c0b288f611", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05256b31-1483-4920-a224-d513ce7b4cb3", "sighting_of_ref": "indicator--1da186a3-b81a-4664-9757-a39ff11ec2ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade3586a-f0e2-4bc6-a97b-4376ab79b48a", "sighting_of_ref": "indicator--e004c5da-1eeb-4595-bb53-fe459bfbd669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f663321e-5aeb-4778-84e3-a9bebcbe6e6e", "sighting_of_ref": "indicator--59514176-9fbe-498f-a801-310ebd47dbc6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fba886e-4b07-4d82-9976-d94b622f4904", "sighting_of_ref": "indicator--c3f64c33-6000-4e5a-9ac8-7a273cca5973", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90334f97-b59b-4e18-aec0-7f6090f4167b", "sighting_of_ref": "indicator--1c8bf0a7-bdbe-4793-9a56-7f43eabc8575", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f4eec0-d920-41d9-b9c0-b54468c915e8", "sighting_of_ref": "indicator--4fe6c1d8-5468-4ae3-ba26-71a050479763", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1f0019-92ef-44cd-b88f-27d8464ce6fc", "sighting_of_ref": "indicator--f8e315b3-7b2f-43de-a7d2-b80e7620e27f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d50ef8-6382-4369-b68b-111ec733978d", "sighting_of_ref": "indicator--a53f32fa-780c-4a17-893b-7ef80bc7f252", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88520795-d162-43eb-82d5-c74a082c26d0", "sighting_of_ref": "indicator--ca06437a-bf44-4925-989f-d39d47f6aa45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c05158d-3559-4d3b-9066-6e3317aa3511", "sighting_of_ref": "indicator--7ecd406a-4eaa-48aa-acf0-899d7d41e546", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d9803-ec3b-4c9b-bf4b-bdf7892b7fec", "sighting_of_ref": "indicator--58190211-8d5b-4036-8116-614328938882", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7737c5cd-dfea-4dd0-aa07-452d8057d383", "sighting_of_ref": "indicator--058d722a-55c5-47a8-a6b3-8cbd4e56790e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57774f22-25b0-4f4e-bb4b-4092920f3805", "sighting_of_ref": "indicator--8139a54a-7032-45aa-a424-5f96f65dd975", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb1a320-3208-4915-8f7f-d5c065f613ab", "sighting_of_ref": "indicator--7277eb1c-3759-4a51-a5a9-c229ff1dae67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dbc5e6-df75-40fd-840f-28919905595f", "sighting_of_ref": "indicator--b4e935cc-f94c-4662-abf5-4de3fe68a85a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ccfb86-b546-405c-93c4-33aad4133e8a", "sighting_of_ref": "indicator--5ed7b67c-7e2c-44d1-986a-3c058815f947", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4539cd4-0f4e-4111-a5f2-74ec641b06fe", "sighting_of_ref": "indicator--2e368792-384b-4eff-8458-6ef2fd3ffb97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3093bf67-7428-487f-812d-a345adc35a3b", "sighting_of_ref": "indicator--37161844-7eea-4e25-8634-20e7e92952b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1878a-bc54-4fc6-8561-dec0b718fb0a", "sighting_of_ref": "indicator--11edd366-953d-41c6-9fa7-224e38afe574", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1945efd-02bd-4eaa-87b8-b4e4206c6fbb", "sighting_of_ref": "indicator--e2e29f5b-485d-4212-8fe2-56619ffa9c6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e30bec-3ab0-425d-a5ec-be4f49bd0796", "sighting_of_ref": "indicator--631ca984-3418-45f1-8934-978031a9f273", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7741ed-cad9-445f-9ab2-2586eef474c8", "sighting_of_ref": "indicator--3aeea623-8997-40c5-8a36-7b8c1c51e4b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5de12e-ae7a-4d87-89e9-51c5f59863db", "sighting_of_ref": "indicator--e4128e40-2a0d-4ca0-b7cc-3578f039397d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db984aa-17cf-46be-91c9-6846708f77ec", "sighting_of_ref": "indicator--2fdb3354-5af2-4bcc-adc6-223cd3c1fb0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f723371-282b-448d-98f8-20d22050193e", "sighting_of_ref": "indicator--44ef62ae-1afb-4394-b770-a692b6fe4d63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2822a91b-f476-4aa8-b42d-b148bbebd178", "sighting_of_ref": "indicator--09cdfe12-d885-414d-9f89-518419188e17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c6d7a6-dbef-4ada-ac9c-be92489065f0", "sighting_of_ref": "indicator--bdc6b8c5-187a-4de2-b7c1-b20f9d9716cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac24ec6-ba89-4e84-a656-25c976288fda", "sighting_of_ref": "indicator--83718c02-6590-488f-a07e-324ed59429d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef482dac-890c-47b5-8237-4f3c35aba4f7", "sighting_of_ref": "indicator--05c6bbb7-0a6a-4f84-8b0d-6426e401307f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2339e862-f5d1-4402-9900-a6c8455ac964", "sighting_of_ref": "indicator--ef16bd6a-0f3d-4fdc-aa49-df99df6f0a5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9a4450-f39d-4672-8fe1-e84d6f80841c", "sighting_of_ref": "indicator--92c90d1f-64b7-4845-8b3e-19f4ef75a3f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9a08c5-3966-45bc-8864-0084a0a8d685", "sighting_of_ref": "indicator--dfb7f21f-b959-4cd6-8a20-cccf77fcb656", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b265d0e8-90eb-4acd-a6cb-3b63d7e7ee9a", "sighting_of_ref": "indicator--ac232f5d-6e04-436e-97e5-4398b8676a24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92a540b-f321-4430-874c-5b335aecd510", "sighting_of_ref": "indicator--5aad2b84-4af5-4a2f-89cc-be70dc95b9bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f972e83-157b-41ea-819f-658c86864aca", "sighting_of_ref": "indicator--f2e03d92-58cd-4f64-a1db-12e1a055110e", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533493da-90a5-461a-8b9a-235db2376b63", "sighting_of_ref": "indicator--3a4f2d04-c240-4b17-86d1-5c845b2506b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba8d192-f447-417a-a2e0-228abb41ee7f", "sighting_of_ref": "indicator--01a23f2d-bc17-4c1a-b587-022d2c8d2754", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e12e4a-2cd4-41d4-8e4a-00e68bdb033f", "sighting_of_ref": "indicator--31364df2-815b-4f80-9260-efae7f1f7da1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c67e61-9a44-4a31-a9c4-6b202421ee7d", "sighting_of_ref": "indicator--801ca184-a2f5-4923-8e76-5f9b1060167a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b1531b-93c6-4abc-8ff1-51d2a2d0d1f9", "sighting_of_ref": "indicator--dee9bd37-98eb-40e8-8c6a-e1860f0ec5d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aedfa6-db80-4bc4-948e-e3e4c82c8c6f", "sighting_of_ref": "indicator--4b0e0fb2-a4ac-4005-98e1-3ad61fcf97b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8680ddd-ebb0-41d8-982c-0941f11e14a5", "sighting_of_ref": "indicator--de60b979-d295-4bee-9140-ee89ffe39f43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca4c9da-b47c-43d3-bf2c-4f8794ccac12", "sighting_of_ref": "indicator--8318dbb0-345c-4c53-9610-bc92ba270eb0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc25cb3-8afa-4ebc-85e7-8540c83cce02", "sighting_of_ref": "indicator--581d93e9-ae4e-4c07-8d8d-e484e835af92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7590e4-b090-4fd8-ac97-222e3fb46887", "sighting_of_ref": "indicator--3ffd5ba9-5b93-42a0-b285-c49fb2bb62f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11106333-5883-4b08-b41b-719f3eeabae5", "sighting_of_ref": "indicator--0cf6afd3-fd06-4349-a2d5-5b775da2a2de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed330aaf-f282-42b5-9f5a-67ce26a73a4a", "sighting_of_ref": "indicator--0edf2b6f-7d7c-4cf2-9488-ec917bd17c22", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e63a6e5-a509-4ada-a933-68d76bca3c52", "sighting_of_ref": "indicator--9d1cdd56-a082-467b-8f75-5efba6dd760d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf22f5-795d-4b7b-953b-4581831d7d01", "sighting_of_ref": "indicator--0866b55f-8c02-4708-b94a-e43f0b5846da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f611d6d5-0b6f-48b6-b929-549bae58938d", "sighting_of_ref": "indicator--3f5bd499-24e5-4f86-897e-dc86cde7d6e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe17065-d313-41a7-8314-529293095845", "sighting_of_ref": "indicator--8a00ec6f-b302-4ff4-bb09-9355dad78492", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e6705d-2eab-455f-8d98-00436ceea97e", "sighting_of_ref": "indicator--e0524f54-9c95-461d-b23f-4eee7b4d55bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc3b9e-5215-49cb-a156-7a536358f17b", "sighting_of_ref": "indicator--a32ddb99-f5ee-4b98-bfa0-33c747ff2e74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd9b5ee-8a6d-466b-8433-b0cbe376d22f", "sighting_of_ref": "indicator--21829f40-16d6-4bc4-a537-2df5173711d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0b73c8-9694-4d69-aaaf-85b9d2704e8c", "sighting_of_ref": "indicator--89694f9e-d0ea-468e-837c-c8adbd54b6b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2d73b2-eea5-4f28-98bc-e03adec7fe7c", "sighting_of_ref": "indicator--d2ad9c38-36d7-4d9b-b40c-e325e8c60bce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1632c44-3519-448b-a61a-43c74451a915", "sighting_of_ref": "indicator--fe0a4b81-0b60-42ab-8c86-2bd5a4520ada", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62195b4d-13af-425e-b217-78df343186e5", "sighting_of_ref": "indicator--799e769f-90cd-4a11-8f55-58f22af11d5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9fd7c8-0133-43c0-afee-737bae4b2834", "sighting_of_ref": "indicator--409dca46-a201-4e2d-b8ff-6a0f743e71d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdfa42e-c58a-4859-8106-80d3d074fea4", "sighting_of_ref": "indicator--5476bcf4-bbab-4828-8870-aab98e12e22c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e98d7e-bb24-4e1e-9149-157a43597922", "sighting_of_ref": "indicator--69777049-b6b8-473c-99bf-11bdd752a81d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337e9694-8274-4e20-aea3-0860efee5ce2", "sighting_of_ref": "indicator--7dedf7aa-35fd-46ab-bae2-66ce8001d083", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218b0a25-2880-44cf-9c1d-45badda82deb", "sighting_of_ref": "indicator--da283a7c-c27a-4bf8-b651-701b858dce73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccae1d0d-b19d-4537-b09d-c8d481732907", "sighting_of_ref": "indicator--aba6487c-049d-4833-b0a2-c854e0421122", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840943f9-1e27-4e24-82e6-a16d68015cfc", "sighting_of_ref": "indicator--76dd68e2-50d7-4d68-9a28-67441ed18d74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a445009d-b1ff-4d06-9a3c-cb71d8efc131", "sighting_of_ref": "indicator--7dc69434-b4ca-41e0-bdf8-8a392ce7c1a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5197419d-0ec6-4a17-8648-52c22f24b5b7", "sighting_of_ref": "indicator--b651ec65-dd1c-4a08-849c-2ec17332e095", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112b232a-7d2b-4fb7-a72d-1a725e7c1632", "sighting_of_ref": "indicator--4a2de7ff-57f4-4d66-9eb3-00519f5989f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612e2c52-d812-4abb-938b-c7d9f1b91bfe", "sighting_of_ref": "indicator--1ed98d2b-7e36-4d5f-b7a1-332830252515", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4112fb9-1b55-478e-b903-830f2857bba0", "sighting_of_ref": "indicator--62daa07b-0f61-4baa-a8d0-5aa7ffa65992", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf5cb20-1e62-4282-aa1c-8288cb2a7620", "sighting_of_ref": "indicator--eb1a7e75-6f62-44de-ac55-23298f52f950", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347a73a0-5382-400e-87cf-413406cecdeb", "sighting_of_ref": "indicator--e96012c2-60f5-4c8e-acde-c26901312f96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b6306a-4fa2-4392-ba8e-c220983feebc", "sighting_of_ref": "indicator--53941dfb-5f5c-437f-a31b-f9a49aa32cdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0922eda7-9718-4068-b1bd-de24be2f1fe1", "sighting_of_ref": "indicator--3e3d0919-3c9a-4547-ae9e-e194fd1702c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f3a8cd-dad4-4d53-a90e-6d302424f184", "sighting_of_ref": "indicator--aed4a9e1-0f46-462a-b736-9417d2230c69", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260d07c7-9a99-4388-a1ca-0f1008b369ce", "sighting_of_ref": "indicator--cceb1cef-5cfd-4e99-818e-14491f68ca38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a16ec2-9a91-47a6-a14a-18f57ac92fa4", "sighting_of_ref": "indicator--62fc0523-dc37-458e-b4b5-6b9347f234b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687a2496-eee8-424e-910c-d6aa7de359a7", "sighting_of_ref": "indicator--765eb42b-4de3-4ad7-b4b8-448e5a20a782", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256166b3-3491-4f17-8f1b-10b09ab364b6", "sighting_of_ref": "indicator--c2d74678-634a-418e-a25e-36d4177d480d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f3cb20-9dde-4425-811f-8e13bf0374aa", "sighting_of_ref": "indicator--4601c86d-3b15-46f4-b3bc-d06610a8e8d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89733cf7-3e64-4e0a-ba1c-6670bbfa984e", "sighting_of_ref": "indicator--0ec14cab-359a-47c8-87dc-4fd3cdebabfa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6bef77-a575-40de-b98a-7d80d05be127", "sighting_of_ref": "indicator--5a1ed116-0b4d-4d0f-b8df-f7e4d5a45ecd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166bb40-8670-4c02-960e-dd650b6d301b", "sighting_of_ref": "indicator--b0ec6c4e-f1d3-46e9-bcf6-b3a95b806140", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0313339-a036-4352-9ef1-83fb0cf7d28a", "sighting_of_ref": "indicator--93c6863d-bd77-4e4c-bc26-6c54734b370d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc7d34e-3523-4b0e-920c-4e36ade12a70", "sighting_of_ref": "indicator--7b5a36a8-8bf0-491d-9162-c02b9b5d7b8b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ce1d2c-b764-41e0-b466-c94590851758", "sighting_of_ref": "indicator--72d337af-d69e-4bf8-84fb-2fb12567c17c", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4ebcbb-2cec-4c42-a4dc-0aa9d5f40a29", "sighting_of_ref": "indicator--aee25ff1-ab78-455e-9b33-e239de8fbbd6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1258a3-9dba-46e4-bf5e-34f6f3d42694", "sighting_of_ref": "indicator--62a7313f-8d01-44bf-8c37-45094250dd5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfc0e28-0dc0-4210-8167-c3229cb46832", "sighting_of_ref": "indicator--bbdd3eba-73dc-40ac-9c78-d3790ed5ee63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfce3d1-7d2e-46ad-bd57-73bf1f57cfee", "sighting_of_ref": "indicator--25457897-a5ff-4678-b597-c3bf6a6ba2eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc724036-9cd8-46f5-b3a0-46b9cc7e8a80", "sighting_of_ref": "indicator--05fde2dd-753b-4f91-8c41-8d20a2d74c57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13fff81-b318-4f8a-a5db-b48415f2f80c", "sighting_of_ref": "indicator--d382ea40-a29d-42eb-a8c3-4ec174aeda94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602c31cc-b44c-48c3-b49e-75c45ea0393e", "sighting_of_ref": "indicator--033fc943-ba44-48c9-926e-2dbc81d6e743", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3fee3b-a598-4e54-8c20-4db196a27b17", "sighting_of_ref": "indicator--41060982-35bd-4906-85ca-a2d06c347a29", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250faf0-9407-441d-b15e-5599ba97a6ee", "sighting_of_ref": "indicator--71ff637d-be1d-4dc0-99d6-20ee42409fff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1885a296-86bb-43d4-84f9-3b86db86c673", "sighting_of_ref": "indicator--0b9f3cb6-3abc-4ee2-9371-88718821a237", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff5acc3-1d66-4cb9-8ae5-56c043b21bd5", "sighting_of_ref": "indicator--7d2a8e7b-991c-4a71-9aed-cc815065f986", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aa3e78-b9b0-44c0-b4cc-d017291c9b46", "sighting_of_ref": "indicator--6efca039-d84d-40af-b584-e6568aea08ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3fab0a-3394-4f17-aeab-65f617af28ba", "sighting_of_ref": "indicator--633122b3-b192-49f0-9394-8d8fb8cf32d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f4dfcc-4df1-4360-8411-a979024c15a2", "sighting_of_ref": "indicator--01631692-c1e4-4bc8-852a-ee214e7d22be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976afc87-e38e-43aa-b577-01702aa50db0", "sighting_of_ref": "indicator--09666b19-8f3c-4067-aa33-8bcac396020e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed1880-2043-4a75-801c-bbd8297b52aa", "sighting_of_ref": "indicator--859f611a-f546-44b8-893c-250effd258e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efc6653-3d06-4600-b15f-e07da484dbad", "sighting_of_ref": "indicator--80711c67-81e6-4fb3-9b39-ebd69f932475", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a4daae-c5d8-423c-a2e3-692b63d05244", "sighting_of_ref": "indicator--f33bfa1f-d919-4be0-97dc-80eb6e09e957", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01faf96-5d12-421b-9c84-2e75618d29b0", "sighting_of_ref": "indicator--c971b8eb-0a83-4262-a88e-32bd152a4118", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124ae0ea-f00d-49dc-8b15-fc2bf7f45d55", "sighting_of_ref": "indicator--6b336ffe-6f91-429c-9a12-7440adad639d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf882be5-8174-4988-abe0-397d22e90c34", "sighting_of_ref": "indicator--4d386009-d0c2-4968-830b-085d3d1cfbbb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc731cc8-23bf-40c3-9886-4e868b67082d", "sighting_of_ref": "indicator--b0787589-701e-44d8-a365-03786ac9190b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8024880b-6917-4412-a78f-d59996c9d220", "sighting_of_ref": "indicator--5544eadc-774a-4277-be69-83e3be26f228", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5eb8ef1-998e-49e6-96c9-2c39a6af4ec4", "sighting_of_ref": "indicator--cd65c800-7674-4e22-9f20-6f8ed7569d5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfc638f-1670-404a-8c13-36fc0b7d20b4", "sighting_of_ref": "indicator--35c04ea2-8133-4d14-8e16-096c8369b1be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f8e15c-e7a4-44c9-b6d5-3c7dab71c693", "sighting_of_ref": "indicator--e9be8ca5-0b9c-4666-925e-10166da194bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dc2979-798d-4c4a-b998-7664cf0a9c2b", "sighting_of_ref": "indicator--77b737af-391e-44a2-87f7-20ad7e1f2598", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc93786-618a-4e38-b455-f311ccfc212d", "sighting_of_ref": "indicator--2172717b-c1b5-4398-9b80-fbf728a417f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436442fa-1cd7-4ee1-9ae8-f34db82f1e3c", "sighting_of_ref": "indicator--58839392-3290-4681-9a9b-3253ff4b4cae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe268708-06b1-4ec7-ab29-22e961ed9bc4", "sighting_of_ref": "indicator--34eb30e9-52a0-463f-8ffd-f62f740702b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eade4042-e430-4b9a-8373-618c64b17836", "sighting_of_ref": "indicator--00c655a1-60e9-417a-9678-20cc6722ceb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7416bc0-cb14-4cee-948b-1e192675e9d1", "sighting_of_ref": "indicator--85341f97-aee2-4518-b94d-950280d4b953", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2e9e07-69d3-4e43-be9e-b93fb378f03d", "sighting_of_ref": "indicator--4fe3bc3e-55f3-4831-b7a8-46e598462bf2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa25d525-e626-4c9b-a171-de86e483e75c", "sighting_of_ref": "indicator--d09e44e7-8875-4966-a1fa-51fd98fcecb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea975af-38de-4580-982c-cbdf9dea88f6", "sighting_of_ref": "indicator--e2ad9034-8852-4a92-9e00-f129a7db68cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c82dcd-e5c1-4d8f-8e0c-6773aa301bcb", "sighting_of_ref": "indicator--504357e4-798b-43d0-b725-96afd4e66a92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8219e1-57ea-4473-8219-2787ac64704e", "sighting_of_ref": "indicator--122e575e-eeec-4ffa-bed0-f104aace1608", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1519e74-28b0-48ee-a532-4beb83779947", "sighting_of_ref": "indicator--4910d37e-bf2c-41c0-988b-12bcc2523cbc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b0576a-bad1-4095-aaab-0d5ac5955006", "sighting_of_ref": "indicator--e4543e72-64a7-437f-8f2a-c1952c427125", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82af2474-3800-456e-8a50-4ee797ba9ad0", "sighting_of_ref": "indicator--fe39ffe4-9c9d-41a0-8965-8286b3b902c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e52b1a4-f158-4798-b884-7851e63ea9ad", "sighting_of_ref": "indicator--e3648ab7-3297-40a5-8efa-030ff27f1cf9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfbf950-b917-491e-ac50-d1961d9a2dde", "sighting_of_ref": "indicator--81ddddc7-dcbe-4c6a-9b3c-5cec5a5676cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b654a8ac-ad6e-4414-947a-d8ede420b1eb", "sighting_of_ref": "indicator--f5547103-1939-4895-8051-39ff475e9d61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3c1ff8-d414-4e9c-b410-f059e03bb688", "sighting_of_ref": "indicator--9f01af26-7831-4556-8134-376ab7bd77ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f404067-5ec7-46bd-a544-bef360ea73db", "sighting_of_ref": "indicator--de4b4701-74a9-4514-9967-bdde6cf72022", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84499a1d-1442-47e2-8f3f-c7ba4c70ce27", "sighting_of_ref": "indicator--c764e2f8-8166-48c6-b443-71f2db4daed0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2cd453-78db-444c-93b6-a53103d4fe27", "sighting_of_ref": "indicator--1f525dc3-9e3a-49e9-ae3e-c5cff8a596e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc44c6d9-e335-4db4-9acf-0cef5ee7131f", "sighting_of_ref": "indicator--f4b023fa-39aa-4998-accf-e267e7642904", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04ea6ae-f287-44c7-9254-e687e213ac9e", "sighting_of_ref": "indicator--992f9a30-a2f9-4ce7-8d6c-ff3da3216645", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088c3f41-d829-4c54-8aa9-94182ec37525", "sighting_of_ref": "indicator--53a74ffc-6670-44bf-9509-7d977cacaecd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d53c7f8-3fb4-4d43-93f2-b958f10348da", "sighting_of_ref": "indicator--a1daa60b-6a9a-4615-b3e3-5c3ca694b1e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1468656-1220-424c-8b58-b2113049dfc3", "sighting_of_ref": "indicator--17a4f52a-7ad5-4d9f-89ed-e7f56717c938", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f945795-d043-4a3c-83bc-941594ef18da", "sighting_of_ref": "indicator--7149bec5-5ef6-405c-9d16-4cb379135298", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bebb22-02ec-4891-8545-2cadbc8b72ba", "sighting_of_ref": "indicator--fc5e3b56-c940-414d-ad84-59ad79834564", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89d5f78-948e-428d-a594-ffb28ba5e696", "sighting_of_ref": "indicator--a69c33fd-9926-41e2-893c-4973890830b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a117288-5aae-412d-9a42-2384ce5acfa5", "sighting_of_ref": "indicator--3cceb534-71d5-47b6-bee3-1bf706cfe406", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720fc2ab-0149-44fa-b2b2-6701a316edd8", "sighting_of_ref": "indicator--7dac87fe-a10f-4451-b7b8-ca216bcd9f33", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5f3b63-d2ba-4e56-9e2b-315ee24a455a", "sighting_of_ref": "indicator--74f71da5-9edb-4a06-9435-b7aa93f17842", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baee90ff-c177-43de-8f50-5a8392df1e30", "sighting_of_ref": "indicator--2bba30dd-1a43-4631-b8f9-20b8fade2507", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9647333f-cecc-496b-a5c7-6088ec87392c", "sighting_of_ref": "indicator--1356131f-2c16-4fdb-8976-dcb286d85415", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160e838c-92f2-4d4e-9f7d-8f94746acb84", "sighting_of_ref": "indicator--4b397a37-f07d-446e-b493-754093d470d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd30ea2-2f9a-4dbf-a9b5-24d007d67b91", "sighting_of_ref": "indicator--d0b42255-8f8d-4b0d-838f-f0289ab64dbf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d6c8d2-91d4-406b-9d49-b83a02f76aed", "sighting_of_ref": "indicator--cfa7e818-589b-4917-a0fb-accafade0ca4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d6ed07-2f59-47d1-9382-33fbcb1c67bf", "sighting_of_ref": "indicator--27cdac7b-bf43-484f-bd99-a0c97fecafa7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452d81d8-7f52-4398-a159-dfa9f402d7ba", "sighting_of_ref": "indicator--5094bf0a-0cb3-4473-8490-744388d3a0e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dc6f25-9f61-4273-ae1f-4996735c3251", "sighting_of_ref": "indicator--ce12efbb-b6f2-40ac-8255-e81f1a12b077", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ddef00-0180-46b4-aa81-6774f72da4f0", "sighting_of_ref": "indicator--ce12efbb-b6f2-40ac-8255-e81f1a12b077", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c117b408-98d7-4917-9d83-74ba8b86ebb8", "sighting_of_ref": "indicator--de410881-b359-4849-8c82-9ba5d94424b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4a8af2-a8a2-41cd-90ff-24dbccefb321", "sighting_of_ref": "indicator--0337dd63-d2e8-4f65-bc67-3d560b0f9c80", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae724cb1-f59c-45fe-9c10-57c281417c10", "sighting_of_ref": "indicator--129edd80-e73f-49c5-90d4-4c984b9d01e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e5b774-cda1-4a78-9463-713c42bf83d0", "sighting_of_ref": "indicator--ff732e8e-1ddd-4c19-a73b-a5800c8a771a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5759ae-877d-4bf3-819f-9d07071b87a4", "sighting_of_ref": "indicator--582d6a6b-ffe6-49f1-9b62-7a8111a9c92f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e74c227-b2fd-4e6a-b59f-9094e941833e", "sighting_of_ref": "indicator--d086e682-8d27-43b5-8b6c-21ac589c90d5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056ab3d9-8201-45ef-bc5e-8fdcaa86603b", "sighting_of_ref": "indicator--0a93e341-b9b2-4b16-8c58-01fc5e993f21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d211a156-bfe6-436e-9099-00cfcb88fa6a", "sighting_of_ref": "indicator--764330fe-309a-46c5-bcdd-53fe722a2701", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b599ede8-d96a-4bc2-ae69-0019d0071408", "sighting_of_ref": "indicator--65bfbb88-e50f-4b0f-b1c7-93cb89054fe4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dee55f7-0ad7-4c56-a560-026c1d65edc7", "sighting_of_ref": "indicator--37872435-4e57-47e8-81e7-bca8f8621ce5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bca1be-fc47-4749-947d-65c744f7ba44", "sighting_of_ref": "indicator--e2ca3eac-e02f-4d02-90a0-f8dc6c4506f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358e1952-5334-4546-ab5a-b6e241a66ff9", "sighting_of_ref": "indicator--5850d2e3-489d-4ee4-9654-d5424de12461", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da44eaf-b0cd-4b77-adf1-a6a4837e512f", "sighting_of_ref": "indicator--68152015-e258-472a-98bf-05ba22cef8e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338ceaaa-3c59-4c8e-ac04-ddd48152da3c", "sighting_of_ref": "indicator--03c4623c-0764-4524-9a39-c0dfe2137f55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77caaa57-10a0-4dd1-bd05-8983a70ebc67", "sighting_of_ref": "indicator--82999355-a4af-4688-830c-eb579b7e57f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4900f54c-5988-487e-a92f-2ee08c5ba583", "sighting_of_ref": "indicator--dfce753b-57e6-4d13-9b93-5a6f22fded14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf0ab77-b7e3-478a-a661-c8493dc10f44", "sighting_of_ref": "indicator--9fedce02-b754-4dc0-9d69-88c8ba0e4054", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8149f448-78ba-45e4-86d9-9138d7558a28", "sighting_of_ref": "indicator--54376cb7-2573-463a-8a43-7942c18225dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefcc76c-8d0a-48ee-9cb5-b570eb9f4670", "sighting_of_ref": "indicator--8f686007-dc80-4376-8b3a-7776bdfb8c1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148af4b1-80d4-4574-a89c-0af7e7bbf771", "sighting_of_ref": "indicator--4e34d1ad-0d89-4131-8b48-935aad97f5ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e3e0aa-2507-47f0-ba76-15737faf97de", "sighting_of_ref": "indicator--e524c72d-0c3a-4bcd-869b-a43641643fe4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97bbdc7-fef2-4633-a97a-6224e35d59b7", "sighting_of_ref": "indicator--9dbbb4a2-d22d-4e38-baa7-726cf5af9660", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a96c44-f07f-4bad-afd7-f4a37c7ef9b0", "sighting_of_ref": "indicator--71876170-093a-4779-ab3f-c74e6d92d29e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee43708c-d679-408e-b64d-d668c9385c4e", "sighting_of_ref": "indicator--4e4d3d56-9931-464a-8c80-7d732392a847", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafa9e0f-3384-4bb3-9f40-6c7ea6aa582b", "sighting_of_ref": "indicator--ecd3df3b-c8fe-46a2-9dd1-cd9924e56afa", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429f660b-b277-4445-b297-62a0baaf4b16", "sighting_of_ref": "indicator--d9ca9be2-b36c-4351-8d0f-530844f7fc7d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8f1eeb-e7ee-422c-8959-3b650acfd4a7", "sighting_of_ref": "indicator--caf9b407-a84a-4ba6-bba0-9adc555b6c93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d109780e-aade-46e6-9913-27c917397a04", "sighting_of_ref": "indicator--d3e50dfe-f661-4c5c-8ad4-2321e4478bdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de2544b-8b72-4dcd-aeef-0b13c049c3f5", "sighting_of_ref": "indicator--65d82c76-bec2-49a5-8756-17fdbae41cd3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e986bf-b963-44ea-9828-f4ad39e4d660", "sighting_of_ref": "indicator--f4e2572a-40c6-4ef7-98b3-f88ac27b60a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891ff6bb-b188-4dff-a805-eed63b9d015d", "sighting_of_ref": "indicator--4a69ba22-81d4-48da-bb9b-cd6eea681279", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9ffe5b-4899-4e3b-a57c-a99e665d4915", "sighting_of_ref": "indicator--fcb25e0d-9d2d-4260-88a9-95720f5e6025", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7007d0f1-6bf3-4a31-be02-81f94bc96665", "sighting_of_ref": "indicator--5c8f1bec-91ca-4a9c-9ab4-91449dcbb785", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925adeab-e384-4ac5-a42f-34d51bed5aab", "sighting_of_ref": "indicator--14292762-6fa7-4791-98d9-33a166d44db1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18342778-6b0b-4a50-8be3-dae9e6e4bd8f", "sighting_of_ref": "indicator--0fe03518-70cf-435c-9a73-dbf1551e958a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e672d0c-0f1c-4aad-bc3f-99b15fb8cc2f", "sighting_of_ref": "indicator--c3b2c0dc-bb0e-4eb6-8165-cfd3c04e9f99", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdb238f-89e0-45e4-a358-fbc8d94a9d8b", "sighting_of_ref": "indicator--09fa8be6-d4b9-4efa-bc4e-64536bb30521", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc60b358-3d94-4eb4-bf62-44c63fceb0c0", "sighting_of_ref": "indicator--7778a130-0179-4611-a035-8bbead2c5f85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f8884-c497-479f-b297-4604ea445065", "sighting_of_ref": "indicator--87432c2e-73bd-42ba-9ea4-07480cb26d0a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdbda1a-e585-4ea6-a523-9f481b25bb1e", "sighting_of_ref": "indicator--59ce7628-4be4-41f2-9b3f-5ef92c5ad566", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb51e2-7e76-4f25-908a-5957547a0f6b", "sighting_of_ref": "indicator--5609a41a-0425-4bc8-8999-09460b485997", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8ec015-28dd-4946-bb58-a4109fa8f752", "sighting_of_ref": "indicator--c78db452-8f02-4e35-b675-aac216ee0981", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e65ee9-3b8d-48ae-b8c1-e2f3c8b62239", "sighting_of_ref": "indicator--dafb0b1c-563a-436c-b20c-51367f1afd4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba7a8ac-0962-4717-8781-4727d6e2b660", "sighting_of_ref": "indicator--06720d2e-f439-4a05-b168-768c992127bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43fd323-e211-4ecf-b08f-7e12502388e5", "sighting_of_ref": "indicator--17906211-65e7-4d96-b7c1-ed9cdc8d2aa4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a00f20-518a-4e9d-a7d6-f0cc4cbb602d", "sighting_of_ref": "indicator--91b61614-5c62-4e3d-90e5-4899d8ea020d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504a04dc-8097-401f-9f40-21bc8b906e93", "sighting_of_ref": "indicator--23f71ba9-60bc-4e56-b1c5-3a0152cab142", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04e00c-8cf1-4b92-90d8-c9d4d95f0c87", "sighting_of_ref": "indicator--92e91188-70a4-4e76-9e94-55b3b8e650bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b38dc46-6d6b-46e9-98c5-f565ac53be9c", "sighting_of_ref": "indicator--65fb39ef-da77-48db-8eae-db024afa2bf9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0ca8b-0835-4016-b0ee-1352f8a4c2f2", "sighting_of_ref": "indicator--9a23fa59-f83d-464d-bdfa-b2f1f1637a9d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4772e2f4-7d1b-444b-b450-b624e5bcb902", "sighting_of_ref": "indicator--50a39745-11a5-4cfa-807e-0e7f51c4d4ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076989b1-d9d6-40db-a099-81ff6171e0f2", "sighting_of_ref": "indicator--42ef903c-1428-47a8-9dab-6d97ff4d26bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9163b49-d694-4817-9991-06c5fea2c361", "sighting_of_ref": "indicator--a6e3f2f1-e57c-4113-b138-077bdee1231e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec00b10f-e424-4e19-8b89-dde98fa385a5", "sighting_of_ref": "indicator--18c19640-be9d-475d-ae92-67a3f866ea47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c98aae-65fa-4702-8126-3de5070eb4e9", "sighting_of_ref": "indicator--396ef87d-99fc-4876-80ef-03c2762d6226", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173dfc5e-98f8-42a1-a745-c551920ec701", "sighting_of_ref": "indicator--7cef8b98-1262-4683-b4bb-4d141348f924", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc8fb72-94ad-488f-ac63-089c38befa4a", "sighting_of_ref": "indicator--33bc5831-7f92-4917-87ca-b6f64c515f06", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5984ccad-6e59-4817-bc32-18962723c92d", "sighting_of_ref": "indicator--e73192e5-d79f-4d49-a8a4-298d102e367d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8db684a-4407-4203-a4ca-b284e0382b30", "sighting_of_ref": "indicator--9196cd8f-be99-445a-8024-189ddaa456f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb7eb20-dff4-4c7c-ba2f-592bb47cc5ce", "sighting_of_ref": "indicator--d8e25b69-5d9b-459f-a5e5-b702b44e1d1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4864a00d-8926-4dc9-89cd-c86c3fddd744", "sighting_of_ref": "indicator--b8be1a23-b009-4b87-9f96-204b4e2dc73b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb45f4ad-8ff9-407b-bd16-8747076726e5", "sighting_of_ref": "indicator--c446ece5-c15c-4f5c-b5dc-ecf478a36b92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494056d8-0208-4235-8d03-532a30fc09e7", "sighting_of_ref": "indicator--04fffd23-ab25-46f0-9823-0cf9d101ba78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f90d68-054c-4854-9813-190aa9b8acac", "sighting_of_ref": "indicator--a2b2325e-77a5-4ebd-ad1e-1953d1b97c60", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc33f60d-e3e3-4991-8738-2b3b769fa988", "sighting_of_ref": "indicator--8451d490-9784-4679-a2d4-3f41313961c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9995ce-259d-4990-a049-18844aa44ecf", "sighting_of_ref": "indicator--d64106a3-9dfb-420b-84ee-3198eea9b32f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68854e6-f37f-4014-8c89-6fa6a8a60c1e", "sighting_of_ref": "indicator--9ef1bdaa-4af6-4759-ab7c-a3ff065b0058", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae34d8e0-1a50-4e43-921e-29d2ad503c13", "sighting_of_ref": "indicator--3a511317-3986-4912-9367-599b39fa5cf2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fb2f77-cd09-4028-aa52-aba5a1f3455a", "sighting_of_ref": "indicator--d4b07f72-d039-416a-95af-c8b4e1946cbb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc53f87-878c-4b3b-b09b-d22c431de1b7", "sighting_of_ref": "indicator--054a01d8-8dc9-456d-b3c2-bbea68b52071", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd56e2f-2b45-4ce1-a87f-437f8c65997d", "sighting_of_ref": "indicator--e31ad713-6b52-44dc-ab16-4b8086d3a29c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bc38a2-61f0-411c-98c3-acb254bd092a", "sighting_of_ref": "indicator--9a365e3a-a698-49a5-a8df-205df5330940", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d12e2ef-173f-4d66-98f3-24a38aa3fbc3", "sighting_of_ref": "indicator--9a365e3a-a698-49a5-a8df-205df5330940", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3549e790-86e3-4860-8949-a3c7d9a91c7a", "sighting_of_ref": "indicator--14104bf2-54f8-4e57-9f16-c38e0c21a509", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c2ff42-748d-45f8-88b9-deff15dcf3d7", "sighting_of_ref": "indicator--9ea4722b-8b42-4e1e-92f1-ac96a606db03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd0c96c-1588-41e3-b930-86d1855a6909", "sighting_of_ref": "indicator--a68d493c-9e17-4455-8dc7-bb0f385433b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196f5994-99e0-48be-b28c-38ad74e166d4", "sighting_of_ref": "indicator--7567b732-f407-404d-acbb-77e80cd61318", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5515fc76-8f02-41ee-a926-ccb6d1fd7007", "sighting_of_ref": "indicator--23d5d172-f1a3-4656-a178-6f5696aa8da1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402603d0-cdbe-4989-9f0e-2e3643d3656c", "sighting_of_ref": "indicator--de4b128c-f9c3-468f-a752-cae3b1442ebd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3662f7d1-9b77-4562-9aa1-a48d87ddf4f5", "sighting_of_ref": "indicator--1779ba5b-ff62-497e-9b55-24671f33ace1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990e53d-4fb4-48b7-81f6-432fca657384", "sighting_of_ref": "indicator--4ee23579-3fac-4dc3-a25c-2bd0d93b5847", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293df916-e265-44f4-97e2-8a14468a8e82", "sighting_of_ref": "indicator--4ee23579-3fac-4dc3-a25c-2bd0d93b5847", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c26218-e2cd-4ad1-94b4-461c51f0609c", "sighting_of_ref": "indicator--84bc7af5-8069-49c5-839f-62501f6433a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf916f5d-4746-4444-aecf-e9942d57d991", "sighting_of_ref": "indicator--cdaa7cce-9d12-43c0-a225-ed74d3cdf14c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b7601c-881e-468a-8de5-14a910df4e0e", "sighting_of_ref": "indicator--038ac853-98f6-4267-bd4f-4659064a3db0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c909a9-bbd4-4df6-b424-522edb875cbd", "sighting_of_ref": "indicator--42aa7030-9bad-402d-8188-bbf2867f1967", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127bc3b-ea97-40e2-b473-46630544e330", "sighting_of_ref": "indicator--86761a78-73ad-4048-a0c5-da7c817208b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d675287b-44a6-4bdb-a187-09582117ecb8", "sighting_of_ref": "indicator--69baedd4-4467-46ac-8857-cbe06fe243bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a78caf9-b0fd-4149-a582-031f345a4601", "sighting_of_ref": "indicator--ef7226d9-7d7a-4fab-a3ae-9ff617e8a716", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1443b2-92d7-4231-b451-0d39ba55fc6c", "sighting_of_ref": "indicator--8d7525b7-c6dc-4db1-bb0d-4e88323dbd11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c77684-23f7-4f99-9c93-ba62ed7b0951", "sighting_of_ref": "indicator--352f3abf-e45f-4bbd-98e4-eded3ad6ca00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5a5bc6-dd34-4e42-b19e-30fcb4649b73", "sighting_of_ref": "indicator--04211584-0bd8-4ef5-bf3c-4926d798c43b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d91f85-ad2c-4023-8140-779b2197753c", "sighting_of_ref": "indicator--d36d3c99-ff59-456f-80bb-89b48eb61076", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb027c84-9903-4c46-a3d4-e4dd9902ae36", "sighting_of_ref": "indicator--fbfb30da-d363-42e8-8e79-4edd3c6f6777", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e4668d-9615-4eb9-b7a0-1aa33fc52109", "sighting_of_ref": "indicator--806f4ee3-43b2-4e35-9c19-54418093f422", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880759f4-594e-41b4-8483-bfce3fc0064b", "sighting_of_ref": "indicator--6cb901e6-63d4-4877-9c6f-1c3277f3da86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48df9d67-b89e-4252-ace6-79c5f4cfc8bb", "sighting_of_ref": "indicator--37703d89-30f7-476c-938c-c6f10279124f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d88722-c74f-405a-b2a5-2fc9789a1570", "sighting_of_ref": "indicator--31eb9d0e-2067-412e-a665-da253f3c47a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75d58c-6d8b-4020-bcbf-553d49e395ea", "sighting_of_ref": "indicator--2b342f46-d3a9-49c8-943e-1aac1c812756", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a76ab7c-22b5-4fe0-bbc8-a7badee196dd", "sighting_of_ref": "indicator--9f3211e3-9559-48df-bbef-08b892042546", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbac2607-b375-4d4c-a3a3-988e0e22602e", "sighting_of_ref": "indicator--4f754403-d4df-4763-a534-8a1519a46043", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c9c530-ea76-4cb6-a12e-47cec1aedd2c", "sighting_of_ref": "indicator--67d42fc2-dc04-41aa-b937-1f1a5c6f6ffa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e71f588-ab2c-4849-b46f-aae12c7c3801", "sighting_of_ref": "indicator--8793bf2d-253b-4595-ae01-ba5f8f9a1754", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f923cc47-dbd1-4230-892a-c9a0bcc22950", "sighting_of_ref": "indicator--f11c94e4-0139-4a5a-96c3-28475de98fe8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dea689-322d-44cb-83b1-ef86049df6f8", "sighting_of_ref": "indicator--b7f86ec0-30d3-4b4a-b451-c9723e6a94b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92574a1-42cb-46e1-bca9-c9e2b04c13da", "sighting_of_ref": "indicator--df9ae82a-d5b2-44eb-adea-528c7f4f7551", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aab04f-04f7-4343-ae3a-587cf73b3908", "sighting_of_ref": "indicator--3d8e11a6-59c5-4f78-98d3-758ec85c13de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eb57c4-3269-4959-84cf-e8bb9f40710b", "sighting_of_ref": "indicator--686405a1-1c08-42d5-9657-8db901186a92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9769dc-1fee-410e-92de-2ce602645225", "sighting_of_ref": "indicator--907ab45e-92a1-4153-9015-c36645d90bcb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bc85f0-3d00-4570-ad71-d34b67fa4b8c", "sighting_of_ref": "indicator--c17f3c80-2f5d-4177-94a0-ffa9ccfe6e04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae18df5-f315-444e-8b17-953ed1c3821f", "sighting_of_ref": "indicator--bdf2c7ab-0daa-48cc-bca5-1302844f7ca9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fc94ce-2764-4b59-9a3c-cfc264170ca5", "sighting_of_ref": "indicator--21b83388-9d8f-4849-ba46-e53d0c67e44b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b487e0e1-478f-4290-ae8e-349bff2d06db", "sighting_of_ref": "indicator--9221061b-176a-455b-95bb-6b67551cd73e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df3b757-c936-4374-b07a-d114aa5e2e5f", "sighting_of_ref": "indicator--e2c07951-7209-4e30-98b6-fa2c612f4049", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9154c00a-36ba-49d5-a748-e093a35f4e16", "sighting_of_ref": "indicator--384a43e0-370d-46c9-9542-07e75cd16d3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f084c1c6-1057-4e07-9abf-f7bfbd40aa51", "sighting_of_ref": "indicator--384a43e0-370d-46c9-9542-07e75cd16d3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94ac0f7-e210-4c98-bcd7-4d646a01ac7a", "sighting_of_ref": "indicator--7d2a7f76-705b-4ba1-ad4d-22bcebca8c54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccd10e9-ddcd-4906-aec3-df143cdd0263", "sighting_of_ref": "indicator--2e20e545-395f-41b4-b935-baa8a88ed967", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ec8273-dc77-4734-86e7-9a89865210ce", "sighting_of_ref": "indicator--41d88b30-33fe-4762-9bed-de033e8733d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22bc47d-9abc-4fb0-8bdb-8dec03b5f0db", "sighting_of_ref": "indicator--41d88b30-33fe-4762-9bed-de033e8733d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab6e367-ad72-482e-ba30-b0cc78c7f5f2", "sighting_of_ref": "indicator--76fc1632-f9c5-4495-9b3f-534537dab040", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e6a2f1-4fa6-4c6e-86ab-e6cecd10ae82", "sighting_of_ref": "indicator--385c09f9-3540-4de6-9c52-a98435ece9df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa281852-894c-4828-a138-236c15f65c8f", "sighting_of_ref": "indicator--385c09f9-3540-4de6-9c52-a98435ece9df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ba1c2b-7952-4ad5-8f07-7454b7e8b5ff", "sighting_of_ref": "indicator--fd02b60c-b801-4171-896f-a010e2114d81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb9a5f1-5114-4c5a-b001-3056777a2cd7", "sighting_of_ref": "indicator--44c0f1ec-8616-4ccc-8cb5-786e687b1626", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a487a914-b0bd-4094-b91a-08f7a2485e97", "sighting_of_ref": "indicator--2f26b613-19c9-4a89-9ecb-f5e44c3339d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b187e43f-3270-4dab-90c4-a594c9ca0f19", "sighting_of_ref": "indicator--37312181-3bba-4e20-9aba-64e84d7c83c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afae8d0b-6f1d-4c95-b746-ed2d63da74e9", "sighting_of_ref": "indicator--b5feb8dc-9768-4405-b4ca-b4a3ebcda74e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6967e72b-74be-46a9-b345-752a6af70bb0", "sighting_of_ref": "indicator--5c745ba3-36f5-40af-b77e-829bd2e56241", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3aefa7-46c7-46f4-a70a-8aa54715db5d", "sighting_of_ref": "indicator--0bb74f4f-40fd-4931-8caf-299636128614", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50307df7-cc93-4fd5-85e5-4daa5573df05", "sighting_of_ref": "indicator--7029b707-dc77-417f-936e-cffd5a9eac17", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eeeca4-8184-4937-afbd-df5a4dd86f56", "sighting_of_ref": "indicator--31d06e8a-7de9-40a4-97bd-99da910e68ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77611e4d-0b92-4ec6-9004-0aaa024631f3", "sighting_of_ref": "indicator--6583adb0-36ff-4fd6-bb27-fa10b590fb72", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad35559c-6deb-46b3-8023-70ff83d47c28", "sighting_of_ref": "indicator--86fd5ba6-a4b7-420a-ab2a-8e9330d52ef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f4f190-1476-470a-8bad-16b3cd8d43de", "sighting_of_ref": "indicator--82a1c025-fc1f-4067-9e1a-001b8438634e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68c272f-1c84-4876-bab0-389eba34ddcf", "sighting_of_ref": "indicator--fbc29adf-56fe-49cf-b8f9-c559d25d9dd5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98367fb7-b378-49d8-b0bf-1f1cb06b38dd", "sighting_of_ref": "indicator--2ce138a7-4823-4dab-be18-09dd260b587b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb06dcf-2fed-473f-b3bd-42593021bc4f", "sighting_of_ref": "indicator--f9ff3cf5-1710-434c-a40e-fe53e5a3e08f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b680e1-0fce-47cf-89f6-c99ae2bddd2e", "sighting_of_ref": "indicator--499f4866-a291-4577-8166-1ebe362c887e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f058b92-6147-4bc0-aecb-75284fcb6875", "sighting_of_ref": "indicator--0f1a58a4-ce01-4d80-94a0-c5027b7d16f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd8661b-8072-4a7c-8cde-034e326efb62", "sighting_of_ref": "indicator--a29b72ea-2878-45f6-80a2-9dc6816c9f03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be24ab7f-cdff-40a0-b8e8-5aa47d2df20b", "sighting_of_ref": "indicator--6d4d455d-2db5-48b5-9a33-7ff651ae76d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bec42c-5bfe-4f6c-86eb-0b71f071b03f", "sighting_of_ref": "indicator--d99c0994-6c52-4960-a25b-e2ef8fdb6f33", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65248960-1648-4f32-9bf4-21a25e58cdfc", "sighting_of_ref": "indicator--b4b49d2d-74a7-4359-a456-011e3a7a0fa9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b8bf79-bd15-44f5-9a36-e104b3c5ce8e", "sighting_of_ref": "indicator--fb1f733c-1835-4c59-a88f-ef138e5479c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa78466a-c5b1-4c8f-b77d-5e27e6f4d698", "sighting_of_ref": "indicator--a1c30b5d-e06f-48db-a8b3-32d1ded00934", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12639755-96ea-48b7-b814-24f4998981bf", "sighting_of_ref": "indicator--a1c30b5d-e06f-48db-a8b3-32d1ded00934", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25157aa2-da43-4e2f-8e96-283528830b08", "sighting_of_ref": "indicator--cb3dc3cd-ab65-4906-a969-633d09e91214", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05669c72-7c91-402e-bb68-227512210c6e", "sighting_of_ref": "indicator--89b723c7-74a4-4866-9002-a7c0c9c6ecaa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817587bd-716f-41fc-8e2a-17be8b60083d", "sighting_of_ref": "indicator--15d1b410-87a4-468a-b29c-6c97eb20dd28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975cfa18-6620-4af9-b448-64825408a59e", "sighting_of_ref": "indicator--c43fcb59-ff8d-44b8-a3aa-014fc1af1daa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb2f80e-30a2-42cc-ac8b-cf3ef7e7a481", "sighting_of_ref": "indicator--c43fcb59-ff8d-44b8-a3aa-014fc1af1daa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98f51ef-568e-4041-afc2-5c3c732f8bdb", "sighting_of_ref": "indicator--3692ce38-547f-4bb0-a9c9-497b61351f0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca09f71d-5fcf-4714-af3c-d366fefd2639", "sighting_of_ref": "indicator--7cc01752-49ec-4999-9e66-bfdd96788494", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf57cd-9d79-4d0c-bbf3-934daf86fbd1", "sighting_of_ref": "indicator--83fcc229-0655-4e4d-a23b-8c3f89ac653f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac510af8-bef7-4e78-add6-afd9aed0ae8c", "sighting_of_ref": "indicator--1ca2ff59-5b61-449b-9474-e135772a35a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462e550c-b94d-41f1-87ad-2b6c208da423", "sighting_of_ref": "indicator--8aa576f7-0dde-42d5-820f-ab51f8872310", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f335ffbe-8a80-45c6-9cfb-f89e35d29c33", "sighting_of_ref": "indicator--6a297938-955f-4fd6-9603-cf564bad6ed4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5ad0f5-2558-44bc-852d-1c97ccaab45a", "sighting_of_ref": "indicator--cf009b7f-88db-443c-b949-bd7614afb8e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd61a888-2857-4bbf-90e1-53d3f26466d1", "sighting_of_ref": "indicator--9579377c-631c-4f46-aab4-99b60fc0b6de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4acc85-c8c3-4b60-a56c-2897d48c26d9", "sighting_of_ref": "indicator--03468d99-30ac-492e-8feb-fda03947d46e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e436d3-7d42-43b5-87c0-e2fcf6c9dd7d", "sighting_of_ref": "indicator--baf05ba2-61cb-43cf-a737-69e9f288e684", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2279041-1867-4daf-b307-6cec6fcfda45", "sighting_of_ref": "indicator--d25eade4-511c-4003-b339-95faa264cae7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f5a497-8052-4a6b-b92b-2b8e18e8f27a", "sighting_of_ref": "indicator--2becc9df-06bb-4fbc-8ea8-cb037234e936", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfb9eea-a70b-4a5c-9f6e-95e62333db3d", "sighting_of_ref": "indicator--d71a33b7-bba9-405f-8556-b6b68bf9a467", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408c3409-87a8-4a72-b4f6-ac771ae911ff", "sighting_of_ref": "indicator--e10016cd-edac-4c62-9252-6374903ecda1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3292e9-4e66-41fc-a962-035e679c85cb", "sighting_of_ref": "indicator--99402513-226b-4496-823b-c05867a3205b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5beff4-d48b-4d34-9ad1-877affbbbc80", "sighting_of_ref": "indicator--91026da8-cd18-4963-829f-40afab678d2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4d78ba-c74e-4776-b834-9fdf46d1b764", "sighting_of_ref": "indicator--ac526215-e00e-4342-989f-dc231ae5792d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbecf70a-a9b7-4761-97cc-c8468aea0039", "sighting_of_ref": "indicator--f01116d4-5b24-47da-b822-71befe2ad520", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef53910-a30c-44e3-9733-b531525dd1fd", "sighting_of_ref": "indicator--9c472cb1-df27-49a5-a962-f02eb2ce4bff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c867fcd-fdda-41bd-ab63-0fa895b2b070", "sighting_of_ref": "indicator--9c472cb1-df27-49a5-a962-f02eb2ce4bff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb8011d-b8ce-4152-8509-6bfb72298200", "sighting_of_ref": "indicator--de5dbf79-0761-4106-9c86-464154d87e41", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64225109-9e85-418e-8233-307d82f2c1e4", "sighting_of_ref": "indicator--ac668596-7d3b-4867-9693-97f65efa48bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83009395-95b7-426e-a701-9bfb728be00c", "sighting_of_ref": "indicator--a77fa3fc-d04a-4c25-85a6-b337e5b51e84", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1813ec6f-fab0-42fd-9dd7-8296b4370e54", "sighting_of_ref": "indicator--eb6082b9-8090-490c-8c16-14a6157ba893", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac0318b-bbcb-4e89-b897-65f7a017fb21", "sighting_of_ref": "indicator--1e4f8ca7-7a3b-4d17-862c-0a34882ee60a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e9f611-a2d5-42cc-a228-2902d0f22b60", "sighting_of_ref": "indicator--200dd8b6-21fe-411f-934e-5407da0f4f94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce47fe3-ae97-417c-a49b-3e05327ecec0", "sighting_of_ref": "indicator--5a274de4-6e46-4c4b-b0da-3c6881774d0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692fa7a9-e405-426d-a847-48b1ad6fe256", "sighting_of_ref": "indicator--bdb9453e-816a-472d-9d0b-0ff3463fbfe4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81f4857-194a-4000-936d-2f5b4858d923", "sighting_of_ref": "indicator--c3f1f5d6-e853-40c5-a548-1536a92ec211", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9435801d-8fef-481c-9bcb-8f4de82afa4d", "sighting_of_ref": "indicator--73886ec9-ebc4-4b90-b71f-45f063e4e9ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a912c-3fa0-4944-b8f0-19d9d4b70723", "sighting_of_ref": "indicator--b80998fa-2705-43db-a04d-71cec012e109", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fefd0d-f519-4a04-aee3-dfb82d1f0916", "sighting_of_ref": "indicator--753d82dc-de86-4921-bc62-6efa16a5d30a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a785c89-8cbd-4738-854d-db5c29efd44b", "sighting_of_ref": "indicator--c4f0f9bb-0949-4df5-a1b5-96116c78c392", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8b7e6a-3630-471c-9fbc-72fc51569d9c", "sighting_of_ref": "indicator--12bdd697-e601-469f-95a5-a3183e230d67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b4696-9e4c-4b3b-af53-8b55fb5fcae5", "sighting_of_ref": "indicator--736cba82-1fac-427b-81f5-37ccb920f32c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdd86cd-6fe5-46fc-a54a-940d69a1d247", "sighting_of_ref": "indicator--ed4f3939-5d2e-4581-8f6a-dde94568eae8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00432e72-dc01-45c5-a289-6945e5f3fa18", "sighting_of_ref": "indicator--1b47b48f-be9e-4b1e-a869-5b9b462641f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceab646-18c0-4f9d-be01-b1ca47b4565e", "sighting_of_ref": "indicator--9e532dd1-b692-4441-8d32-f33c9108848b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437bc39d-d8d9-4ccc-91db-0d4fd72cfa2b", "sighting_of_ref": "indicator--402773d5-18f7-4c50-a8ef-565776841cc0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3030bc01-cead-4fab-b2ba-d2631e50f409", "sighting_of_ref": "indicator--072fb4ba-e2da-4fa9-95a2-7a2c2bbffb05", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9d84ae-f3ef-487b-8ea6-22a7547f90b6", "sighting_of_ref": "indicator--eec9e72d-1549-4841-ad9b-34ac3375fd23", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2361efce-1130-4095-9424-f2c4a0c211d8", "sighting_of_ref": "indicator--37813f62-09a2-4aec-a957-ddc4b6e41434", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7e2216-4189-46ba-b214-fbb872e2b5eb", "sighting_of_ref": "indicator--6ee968ff-a757-432e-a4c4-fb8811bf143c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b02ddab-56df-4327-a684-396b3546c646", "sighting_of_ref": "indicator--b0006417-7fc0-44f6-8203-123a3e44e064", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c08df-8bf9-42f3-a0e4-4e33a4f1ca86", "sighting_of_ref": "indicator--d443d7bb-f776-49a3-9b1f-2d504172355d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c7660f-658c-47b4-a587-ed4c573c48a4", "sighting_of_ref": "indicator--a9f53bd3-3bfb-4a8c-84df-d2d257fa7aa1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b904b3-087b-49a0-bd78-8ebb89210a80", "sighting_of_ref": "indicator--3a59e66a-e191-4057-998f-b9b1930dae26", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c21a552-7256-4df7-b118-682b8d9789fd", "sighting_of_ref": "indicator--e4ae976f-b676-4e04-98d4-ba58a9fe52c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948e48bf-6b69-4e57-b78a-b547d85f39ac", "sighting_of_ref": "indicator--32cd9c4c-e5be-40ee-a86a-c7b36681eccb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f341033-f029-4823-a54e-4662205a802b", "sighting_of_ref": "indicator--03a57fd6-2578-4043-8ebe-2674eb21c0e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc90e55-a6e0-4eeb-9670-c4b35ff8db0b", "sighting_of_ref": "indicator--4f98915b-23fb-4d52-9dbe-71aaaa7e5b0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda64451-f922-47a4-a4c1-93129d74e28a", "sighting_of_ref": "indicator--7d1cf130-3829-4f4a-a4e4-529a0547665f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b168c0b-eec7-44d5-a452-5a9ca0b5d38f", "sighting_of_ref": "indicator--9dbbbd05-1a48-4fe5-ab5c-e3df09e8bb83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3408181e-6e5d-4a80-987e-fff839bb31ef", "sighting_of_ref": "indicator--2dfeed81-0a2d-48e0-b51f-479f0c376fab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a1acb2-63a6-40e2-84c3-c38670bc861e", "sighting_of_ref": "indicator--4d91aeac-190d-4d18-99db-c3e5dc94e7db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14a234f-fb53-4d9f-b3b2-508c9abb584d", "sighting_of_ref": "indicator--4284c9ff-dbad-4a9d-afef-573d066916d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33a388f-19f4-4a41-9fb1-1730ab0c46bd", "sighting_of_ref": "indicator--9f85ecc5-a388-498a-97f6-5471572edfa0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e4b7de-17ad-41ce-a74d-6ef311b52163", "sighting_of_ref": "indicator--4e082beb-33be-46e8-b72e-d8e7ac94ecb5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d63a122-31a6-4ba6-8522-710a91171c34", "sighting_of_ref": "indicator--4c1b5530-9797-43a8-a393-1982da3c70d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd6cb5-335a-49de-b7b2-4ba316d6ac47", "sighting_of_ref": "indicator--00d41bfd-9efc-4080-9ac3-57e435e88275", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c698fedb-e66b-44b1-b244-f44d669728b7", "sighting_of_ref": "indicator--017151d2-e7c3-4ca7-9290-f7d4cff2d7ea", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e56858f-f98c-4cd6-8865-b8bafc20f4a3", "sighting_of_ref": "indicator--03e6a9bb-4525-4d9f-80e9-8daea68d2af3", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23ac779-6fe4-47b6-8eb6-8e9d84fb43b3", "sighting_of_ref": "indicator--86ac2ddd-236b-4e2f-b752-c31a099984f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50922d87-d0e1-4e0b-b933-5f3354413174", "sighting_of_ref": "indicator--ae13a5ac-05ac-4b7e-9f95-e58e9e214a37", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a1b8d2-792e-4ba5-b520-2249a29f01ad", "sighting_of_ref": "indicator--34b68788-a73e-4843-8f40-6f766f7286b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6020d4eb-c47d-486f-9df5-52f5fbb21146", "sighting_of_ref": "indicator--0be8968f-7e46-4cf3-8560-7349973f3017", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bfaa1e-25d3-49e5-8a57-2340cf48a77f", "sighting_of_ref": "indicator--a84f0dcd-f5f9-4305-8fb5-a5b24d256db2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ccbb4-0125-45c2-825f-46c4a34400bf", "sighting_of_ref": "indicator--ff7f6412-5904-4455-85ba-2e58c5d3f9c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf09fd9-abf0-4327-bdc8-26f907ee8323", "sighting_of_ref": "indicator--f3898bce-01a8-4c6c-9539-87327360a5e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfb3f99-d3d8-4ac4-a10d-1cd27f898cd1", "sighting_of_ref": "indicator--6981ff9c-85a9-4bda-b093-b25c796304c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22b72d1-b0b6-4bc6-8a16-0496fb3370bd", "sighting_of_ref": "indicator--d3011722-e308-4b51-aa1b-042a8f8b1d62", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696e6a45-9c7d-4ad2-9413-3adb0cef6bf1", "sighting_of_ref": "indicator--043d799a-003b-407c-9ea3-2936b415a3cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db401a72-c3c9-4b79-bad4-9608f895fb28", "sighting_of_ref": "indicator--f3295d02-162b-45f3-ab20-1a019b2af47a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cab13f-0946-426b-a581-8e34bf6b6fe2", "sighting_of_ref": "indicator--259ac2b6-200d-4b37-bfc9-98f2d7cc1538", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835d3187-4e7f-4416-9ade-2b68ddb7acbd", "sighting_of_ref": "indicator--8e070fd5-b715-498a-9bc8-697fe67cbab4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12a4f4f-145a-4798-90d8-8276ff9c289c", "sighting_of_ref": "indicator--c3b53212-fa02-464f-b356-d61230fd8432", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f914eca7-b6f1-4a01-9915-f27a124bf44d", "sighting_of_ref": "indicator--51ea3e86-d1ac-4267-a759-7c705502d691", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbbaf8f-d19a-42c0-9649-e1175e18b9dc", "sighting_of_ref": "indicator--fff91ba3-d198-4d5d-b5a5-184ac9c65c82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4665a03-8de3-413e-a287-4e10df8543bc", "sighting_of_ref": "indicator--fd69e683-f20f-481e-a57c-51eea9ed7e6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a008b8-e18e-4927-9db5-84dc88626102", "sighting_of_ref": "indicator--c1b9681f-5d48-49cd-a1f7-86577e06db3c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676f9132-46b6-45e4-b530-b4f07fc5a2b5", "sighting_of_ref": "indicator--03e88ad6-ee90-4774-982b-ec96411d168b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e1915c-07db-409f-bed5-db8834694262", "sighting_of_ref": "indicator--aba41f8d-c711-449b-a347-4de4799d1754", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f070788a-f637-4386-84d2-e71fa33a2119", "sighting_of_ref": "indicator--267c4074-9660-43c4-8635-33f6652b413c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3daecc-5a64-4e81-a846-47e0afb6ebe4", "sighting_of_ref": "indicator--9fade963-afaf-48a7-89a5-cecb7e42c0d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fb2561-2afa-4c6c-97df-8f5f547336eb", "sighting_of_ref": "indicator--f1685e82-0b10-48c4-b970-eead31601a4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26e9362-78dd-4acc-b213-e663ee444f02", "sighting_of_ref": "indicator--2ba8b162-588a-4ae0-9c46-55a48addf280", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eceab0-7231-4a1f-af0a-e0536e5b9d52", "sighting_of_ref": "indicator--f97e4e26-173e-4f00-a746-1c964d361022", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f562a3-4642-4137-9617-3a2017b464a2", "sighting_of_ref": "indicator--69c0d149-de44-4be8-9b71-b8d0924f800b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c40afc-2848-4715-8556-25a9082b4c05", "sighting_of_ref": "indicator--47629dc0-df6d-460a-bb8b-1ac51d25c94d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72de5646-af87-4af2-b885-1397005194d9", "sighting_of_ref": "indicator--b4e15a1d-656b-4388-9416-1d71c8d752b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265e95b2-4847-4ac9-98b1-ee9ce5ef736a", "sighting_of_ref": "indicator--a92161fa-09c2-4508-a638-da2eb39050cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc239e-ca47-4c70-a111-30e7f973509e", "sighting_of_ref": "indicator--fdd2a0f4-2089-417a-b235-7de15fc6cf87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65500b87-a9d1-454c-9173-16e4010eefa0", "sighting_of_ref": "indicator--75271fa9-262e-4cb5-b776-ee66978bb7d4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb4ce6-8517-4d56-a686-434b5f3c5985", "sighting_of_ref": "indicator--0891576e-c12a-4416-8809-86202acbd743", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea4398c-8373-4244-80d3-9e721ce5d1a4", "sighting_of_ref": "indicator--75875cad-023d-45d1-8984-259e5da77bf7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f202b94f-a11e-4043-88c1-b1e036c4d22b", "sighting_of_ref": "indicator--b132db2c-e827-4b97-8dd4-be5f33979558", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5016d0-1fcc-404b-b867-89b4a699cd6e", "sighting_of_ref": "indicator--e14f0933-65d7-4da3-9389-ba53d1730c8f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7dd40a-8ae0-4a90-9df4-6f4a6a052975", "sighting_of_ref": "indicator--e28e7772-423c-4ac4-a0b7-e9c81b75d294", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6a7911-e0b2-47e6-b7f3-40a73732a29f", "sighting_of_ref": "indicator--b172ad19-f2e6-4835-b150-5c45de0525de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a05353-15cf-4463-b977-c885f21bcccc", "sighting_of_ref": "indicator--dd19a12b-0357-427e-b481-12d61bda6fe3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e33bb2-bd03-4181-bedd-7561e81dcc82", "sighting_of_ref": "indicator--c76c73f5-27f4-46bf-adbb-ea75fc948f6a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2573370c-5d70-4875-89f1-1af64902d759", "sighting_of_ref": "indicator--7ecbce55-6b55-4638-8dd7-03cc4982cf82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00a52c8-8898-4aeb-9f2d-7f2a24cd25cd", "sighting_of_ref": "indicator--fa908299-cee1-4a0c-9770-6440a1ea0dc2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1deb492d-8822-4851-b396-29f7d677fa0f", "sighting_of_ref": "indicator--a82bb348-6408-41c7-84ad-a39b99a5da94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac1042d-6b90-4ca5-9cfc-ba556e66a251", "sighting_of_ref": "indicator--da9f33af-8f6a-491e-a9cb-220bc487230e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98298b1e-88db-4bb6-bd76-76ea300e13f7", "sighting_of_ref": "indicator--3ccc5329-0957-4be3-9ff0-874b9fa96083", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c6589f-2a83-47e8-b55b-4bed3b08dce7", "sighting_of_ref": "indicator--e60cbdc8-893f-4902-ace4-dacb9042fd9f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8227db-3c3d-4ab5-a625-b53fbd1813aa", "sighting_of_ref": "indicator--26e4c0f4-02e8-4d8e-801c-79c2a804fe92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd572ce0-5a03-46e7-92b0-e5da2b584354", "sighting_of_ref": "indicator--bfd042e1-1bc1-467b-bbfc-68f41566a6dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9161cc-5dc6-4a11-8517-f162100a4cb2", "sighting_of_ref": "indicator--fec8869f-f722-40f5-8dc8-9595746937a5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8c387e-1bef-45d4-9c82-9d3b00d81655", "sighting_of_ref": "indicator--8db06073-e2a8-46cf-8c29-155123b668c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d04a06-1cad-4ca6-8696-c2b59b7d6a83", "sighting_of_ref": "indicator--52d540fa-721d-41ee-8cb4-4b1f89169b8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9aa0d27-3a12-404a-842b-8dfd16f5b60b", "sighting_of_ref": "indicator--06d54e60-8bc1-42a9-81fd-53113dc132c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a10346-9975-4c57-a9de-0dfd579483ec", "sighting_of_ref": "indicator--2532dce7-3fc9-4520-b88b-f5acd91d485e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b450f3-dad5-439c-b8d7-1da220e0a668", "sighting_of_ref": "indicator--ced81691-2242-49cd-b98c-017965905bc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e48cde0-c399-4a0d-90a1-d0b0425c08cd", "sighting_of_ref": "indicator--ed186e5a-3883-4244-90d2-f1eb0a3305de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ce6db6-9c70-4ba1-9f7a-736f5580a465", "sighting_of_ref": "indicator--d9d1ac24-286e-4c33-ad74-062d9875b5ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5292f5d8-2f34-4d3a-807d-7761adb596a6", "sighting_of_ref": "indicator--31018266-4c95-4c28-9b54-7a23b951b449", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc158765-7d31-4823-a362-6b6f6f79537c", "sighting_of_ref": "indicator--8ebb3e5e-152a-4da9-8b24-b0f1a394cfb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef970a7-670c-478c-bfbe-6a059b8b4678", "sighting_of_ref": "indicator--585b4a25-5429-4643-a23e-6935c61ed75e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c423afc6-1264-4a4c-9be8-84d15470e77e", "sighting_of_ref": "indicator--01b1b21e-cf44-46bc-9df1-6941068e072a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f44e22-87fc-4e70-8bac-614b2f7326fa", "sighting_of_ref": "indicator--51f23388-095e-4c92-933a-7740fb3ca062", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4a3401-5cbd-41ca-ad49-e852d4a716c3", "sighting_of_ref": "indicator--d046372b-c4fc-449c-bf94-588efb9bd597", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa8fa7b-7f57-4ec8-a459-c4e004dad8ea", "sighting_of_ref": "indicator--5298dd88-ceb7-43ed-9215-62882e65c45c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eccce72-e4cc-45e9-9ea8-0609c013cac7", "sighting_of_ref": "indicator--82cab3f7-6673-4f4d-8c58-9dbf0c01e81d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4248b5-7010-4027-87e0-d334f835cc1c", "sighting_of_ref": "indicator--8cc8e7bd-e086-4003-842a-90140ef7f92a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67981147-42e2-4fb8-9293-cafe1ef23f04", "sighting_of_ref": "indicator--4be8c212-24e7-42b4-a368-cc0aab84f9e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9447f4e4-1169-4dc1-beea-595ded2673e2", "sighting_of_ref": "indicator--5f95f9a6-7acb-4bf9-8851-0eb156e158e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e852042-4f9e-46b9-b284-da3ffde96c19", "sighting_of_ref": "indicator--357c67aa-6b6a-4e69-bfcf-012eb536a9b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83917935-8940-4cbc-924b-fd1afcd5855d", "sighting_of_ref": "indicator--617f017e-29f8-4100-9420-7108c5af8307", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e6ab44-6ad4-405a-8f4e-34e961f20638", "sighting_of_ref": "indicator--68ce75f7-6b88-4b62-8274-cf57ec0b392d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bb039f-ee25-45a6-a510-e33db006583c", "sighting_of_ref": "indicator--57aff138-19e6-4211-b503-a6d6cb6a30b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c644b9-36ee-4f17-a2b4-0d449b834332", "sighting_of_ref": "indicator--05c473fa-8048-4c07-90df-ac6359cd69cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5977f3ff-eb5d-45a2-8e4e-3e5621102dd1", "sighting_of_ref": "indicator--cd5881ec-e892-4f8b-b83a-824bc0bb3d20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb7aa93-b8f1-491f-87a2-80e0b7688e9d", "sighting_of_ref": "indicator--6e19084a-6fe3-49f2-a992-d6395e388411", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55020525-750c-4f89-a52f-e173ff342c8a", "sighting_of_ref": "indicator--f3dbb387-7e9d-4146-aacc-eae9ce466bac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af96a86-6318-46a5-b5f0-2ec3ed1e64de", "sighting_of_ref": "indicator--0573e734-b345-4b31-832e-3b560edd71fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc325e77-a56b-48f7-9002-727ce2c385cd", "sighting_of_ref": "indicator--16fd22ac-03f4-4491-b706-3c0b5f1ed06c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8340162d-cfa7-40ec-9758-af31b8136b38", "sighting_of_ref": "indicator--e6d2a714-74f9-42ad-8045-16295bccefba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d3c046-a1f1-460d-9d0a-f3ddb0c966fe", "sighting_of_ref": "indicator--559a6295-0d72-42d2-82e6-e02869795e14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bc54e8-ac29-4b0e-abac-a26716c6b8dc", "sighting_of_ref": "indicator--53269925-cfbb-4b6d-ab2d-c1fc75e08e08", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bba7dc-d0c9-4315-942f-05927cb9aa86", "sighting_of_ref": "indicator--c4010a77-e5fc-4775-83a5-be64f08719b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36fe9c3-6f8d-4dff-99fb-47f0350345cd", "sighting_of_ref": "indicator--d0350d66-2896-4e8e-8783-fea53559dd3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf69373-5a96-41a7-a832-24dcb9acfaa4", "sighting_of_ref": "indicator--a911e7fe-74da-44ef-99ad-e24bccf43a54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d19673-46ff-44a5-b0c6-df8d01fe8475", "sighting_of_ref": "indicator--74483eb7-55a0-4824-b48e-cf03f443b670", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c3d4c-67ff-4a85-82df-57d0d221d609", "sighting_of_ref": "indicator--ebc527e6-6f73-4080-98af-e9008a49f822", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c52fb3b-5ef8-4b54-b087-f21d5c8720f2", "sighting_of_ref": "indicator--6aaf79b3-b7cb-4974-974b-107d236f3739", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5859672c-26d4-41d6-b420-e4ea3fee98e9", "sighting_of_ref": "indicator--06c2e3f8-5e15-4e40-b7cf-838028a81508", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df9d98b-064c-451a-a535-3b062f4c8fe6", "sighting_of_ref": "indicator--a80af349-4671-45f5-af08-6a5a95f00a3d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d29035-4d35-4358-8b12-9ed29e84302e", "sighting_of_ref": "indicator--4390a08c-9c57-4c83-ac71-d37ed55cb731", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67d840-835b-49b0-84ad-08d0a7278ead", "sighting_of_ref": "indicator--c487ab78-9de5-4c69-ac4f-e9b89effdf24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e435434-c7ce-4fd0-98f8-e1e5de2fb8c8", "sighting_of_ref": "indicator--f13f75ff-9cfb-4025-9c8d-490c24b76619", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d61a6bb-fc73-4017-ad39-dbdbb30ef8e5", "sighting_of_ref": "indicator--12b3baa1-2eff-4283-8897-aa1013ab5e39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afff65da-56e2-4cec-b487-f072e6c4e9d6", "sighting_of_ref": "indicator--5c7c97a3-3cb0-4978-b67f-50bd2c46242f", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4f62f8-c051-4aa6-a265-9236d5d2bae4", "sighting_of_ref": "indicator--43bfbe08-71ee-4b89-926c-e46c41de1a86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d78289-6fba-4f48-a243-ea302a67eebe", "sighting_of_ref": "indicator--542f7bb1-188b-4f30-a472-f0febd2cecea", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e98d45-2448-4d16-8706-fe995f4a1efc", "sighting_of_ref": "indicator--f46aa9ce-0703-49e3-a6a7-b2fa6fade727", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9aa637-3e9e-4d79-8209-ea5b1662cb86", "sighting_of_ref": "indicator--e626bb67-1c8d-4a3c-a937-0785c5fdc0ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7aa6a6-19af-4020-86e8-091e17915308", "sighting_of_ref": "indicator--38bab28e-3b19-4f24-ac53-d20733d5d21f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7179655e-4ba8-4511-ab13-d0d253c57347", "sighting_of_ref": "indicator--335014c1-a7e6-4afe-afb8-f3a9d059b68c", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf73553-316e-4a46-8fdc-883b813b80ce", "sighting_of_ref": "indicator--d097d6f1-0420-469d-9031-eb8b131193c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d739fd-40c6-41f3-9001-eea254383e50", "sighting_of_ref": "indicator--80151c70-431f-4813-adde-3c4283c2a93e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4b4b2f-f802-473c-b242-644e876f33d1", "sighting_of_ref": "indicator--95b4eace-9358-43f6-b203-7a2a9ccb8249", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbbed54-074c-49ec-a297-b30f89c65989", "sighting_of_ref": "indicator--8f05b8b9-8984-4d48-b305-5217234652c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d20dc8c-4ce3-4a36-8543-c350763ab935", "sighting_of_ref": "indicator--2b55e5ee-5360-4377-926a-f1bbf893e686", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480b60de-deed-472c-a147-407667db9387", "sighting_of_ref": "indicator--51a31c15-d70c-45f4-afbf-88558c850269", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ce5e6a-fc42-4602-9332-8da89f4cc01a", "sighting_of_ref": "indicator--b9df2871-ef87-411e-9d7a-de28e3ca0ee1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c6d496-b75b-464a-b8d8-d4498be83828", "sighting_of_ref": "indicator--7483f7da-edf5-45d1-b41b-b50d47c9a351", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e0794b-ff0f-413a-8798-2d97c4971fa3", "sighting_of_ref": "indicator--18b002d8-e8a0-48a4-afb6-25694bc43963", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8081929-8e5d-4648-ae54-0e35fa447d5b", "sighting_of_ref": "indicator--933c07fe-c732-46de-aa53-b2ac989a22a6", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd45d8d-da22-43e6-a6ee-d87545bce34b", "sighting_of_ref": "indicator--a3d50fc5-8fe1-4db7-af96-d517c41f4a51", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0922ced9-0db6-4e2d-b84c-dc3ada29457f", "sighting_of_ref": "indicator--eeffc16d-ab30-4dbf-bc3b-032150878020", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e397fa-c2d4-4d6b-b6d5-4d3e807d9b7a", "sighting_of_ref": "indicator--0408f64c-994f-4922-9453-e8be88a56996", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008a83e9-fd8a-442e-9b19-0b2a615384fc", "sighting_of_ref": "indicator--6ee92b4a-95cc-4347-a8b0-5f4a2bbee560", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346cbb9d-a6b0-403c-9164-ee73bc447680", "sighting_of_ref": "indicator--c3cdcaec-abce-474f-8102-e2945f440246", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b840d96-fbbe-4860-8a47-6bfef4cbe297", "sighting_of_ref": "indicator--ff1abc53-90e5-456d-98d1-29f744f3dd4b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b09190-366b-4080-9a5e-82ae99d19adc", "sighting_of_ref": "indicator--6089c084-b41c-435c-bed3-c72403931ee9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a86922b-d7a0-415e-8003-e4f9c6a46af6", "sighting_of_ref": "indicator--80f56ab3-13e5-4607-a4d7-e9196c80e1a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24126df5-b139-4e4a-9f02-c307602ab00f", "sighting_of_ref": "indicator--0cc01ab7-3a92-4002-9c1d-3efab6b4e623", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266e7d3-418f-4eb0-adbe-7934732479f8", "sighting_of_ref": "indicator--4c570ce6-2f4b-4bb0-a1a4-221bcde2d2eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5834867-b9d9-426d-a84d-32fea294cec8", "sighting_of_ref": "indicator--c4667e94-33f2-43e4-acc8-ab9166205ef1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368699a9-7c27-4527-a465-90e680af8a80", "sighting_of_ref": "indicator--3ed5092f-c0a4-47cb-843c-dd48a07bf067", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b35c7d-8469-46f5-afa2-69c95ff36805", "sighting_of_ref": "indicator--63fbae8b-b39e-4b9a-a632-f536d9727552", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c13a47-46b6-45f2-ba59-2f1a3d05b103", "sighting_of_ref": "indicator--afa488b2-b20f-4b71-9cd3-423c0a53ed9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db361cd-6fd8-45a2-94e7-80748e76ba54", "sighting_of_ref": "indicator--fd8428fa-7b2f-4a9f-8f75-2d1311dca9fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf70b80-2b59-4bd6-997d-247a5cb3b902", "sighting_of_ref": "indicator--3ab58011-6640-4575-b9f0-5318f97952e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aecddc-49e8-49b1-af1c-1238030ff023", "sighting_of_ref": "indicator--0efdf3a6-5699-43be-b49e-56b0aa5251a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802ca4dc-12d3-4e7b-ade0-fb0f77196e46", "sighting_of_ref": "indicator--3a0f5a29-6246-4c15-a917-31923a612a33", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28d192e-d0b7-4af9-a06c-ef6a076715e9", "sighting_of_ref": "indicator--e847656f-2681-4f68-9582-7ee69eb5f91b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5f403-1557-436d-b7ee-e72c748a3fcc", "sighting_of_ref": "indicator--e847656f-2681-4f68-9582-7ee69eb5f91b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af49d2c2-20bb-4c9d-9721-51fdd4498d09", "sighting_of_ref": "indicator--4c21d134-029c-434c-9f0b-f91036f446b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0cb2f5-0486-438d-879b-f7036371a99c", "sighting_of_ref": "indicator--b5f0e921-ad6b-4958-95a7-206ab26b552a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041b0190-2ce2-4858-a0c6-4c404d309f01", "sighting_of_ref": "indicator--e5a88022-d25b-4169-aa11-cc828bb93f48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db911b0-26c0-496a-83e3-a8ef2e160ee9", "sighting_of_ref": "indicator--8357040e-4619-4460-b68f-ad96ccc46fcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de16dd6e-4046-48ff-be14-990da7d0baf2", "sighting_of_ref": "indicator--2f0a6e77-a0cc-40c9-8d76-e88d8e50ab90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f2e4e0-b2f5-4160-9160-2a1002a1b656", "sighting_of_ref": "indicator--ea0c591f-6d89-44cb-a733-6d2e221f2466", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec59328-62a2-4237-a4a6-a3a7991c420e", "sighting_of_ref": "indicator--037bcabe-6cdb-4dc2-9236-ec20a8fac684", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c206081-84f5-40fe-870e-104054255160", "sighting_of_ref": "indicator--9d0a2e17-21a5-4807-9b18-30d0024480a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95744fe7-9790-4c10-8328-104da6b0dd9b", "sighting_of_ref": "indicator--10cc5f91-6461-462a-8466-d2989be0fca7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02395e12-1d84-44ef-8f5f-9bff4c1e6af9", "sighting_of_ref": "indicator--7654ad84-69fb-4f57-a3ca-61d868c81f68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b4f4f8-4231-45f1-8d0f-fc228a80ff95", "sighting_of_ref": "indicator--97d50768-6dfd-47e0-a0c0-1362feadb412", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d68653-d9b8-4a0f-935b-a472baac2eca", "sighting_of_ref": "indicator--e2cb14c4-1aa8-4c40-9dc2-c9610c93bc36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e71d7de-1f18-463d-b7b5-340f32af60ac", "sighting_of_ref": "indicator--8d3e85c0-b191-436d-871f-0e6347600f0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503e8895-30d8-4303-a6c8-12188044e391", "sighting_of_ref": "indicator--060502bd-3b06-4ef5-b0fc-3b130bb28354", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e07b20c-47d4-4d3c-9ee2-9325e1053f21", "sighting_of_ref": "indicator--8dd5d1ed-b8d4-477f-a3b7-9a788d18850b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220cdc91-2aeb-47bb-b47b-37f5c8f3f47b", "sighting_of_ref": "indicator--2807d313-06c5-444d-8b62-02802a74845d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1059c9ff-a614-455e-9a60-bf9e2ce0a63e", "sighting_of_ref": "indicator--19c80800-e58e-4014-929b-f0d9ba292014", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3076e136-bae5-4bfd-a3fd-886adaf8182b", "sighting_of_ref": "indicator--02adecd5-1048-4243-b516-7a6cfac4e991", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a739c422-a6e4-466f-959d-2e2ac45a4ad0", "sighting_of_ref": "indicator--88f4bf27-f57c-4f41-921f-bc9892e633e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fae76e-77a1-4b88-9f1b-f070803cd571", "sighting_of_ref": "indicator--301631af-3ef6-4a1f-8815-16739b16e8ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2742cb15-4420-4c86-89c8-db362548c31a", "sighting_of_ref": "indicator--6aae0425-5b2e-4e96-b353-c83299fb90f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35621bf-378e-4c1b-8d57-6f4411958f3c", "sighting_of_ref": "indicator--0e088efc-6a1a-49ea-8265-f2f8ba3c0689", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9836d811-e3b0-41a4-ad16-cccfb150e4ef", "sighting_of_ref": "indicator--a0e92dd2-087a-4523-ab72-4d87ca526c56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f3612c-fb46-4718-bdf9-9acf0444b421", "sighting_of_ref": "indicator--73eb0d46-c91d-4cc8-be8f-40c52e47ff83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea86e6ea-c261-4523-914d-e9ce3c709f9b", "sighting_of_ref": "indicator--b617c639-fb5c-4b1c-8f3d-8a4f483eca04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c967c2-c149-4ced-a8af-1683f1bb783c", "sighting_of_ref": "indicator--0fb40bff-14c3-4fac-aa34-b7dc49ea9f86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19ed607-9da1-4512-bea5-76669c1dab94", "sighting_of_ref": "indicator--e923e52b-106b-4778-89b2-074e6837c48c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72737f4b-fc12-4d54-b0e0-489f4c9ecf6f", "sighting_of_ref": "indicator--33d57aa3-e279-446e-b253-7398f53ca3f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a687c77-008d-4985-b032-ce74bed36d9c", "sighting_of_ref": "indicator--eedf2737-a203-48c5-ad52-477735d6f46c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c64de1b-cc08-4feb-a467-0dd2a076a1a7", "sighting_of_ref": "indicator--04520785-8761-4d25-a866-0f2ddae94bc6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb24d948-174e-4df7-9508-c9cf8b34f852", "sighting_of_ref": "indicator--fd863828-e45b-426e-9d93-4064254a6a7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe740df3-d1fe-4075-b3cd-359519cbc50d", "sighting_of_ref": "indicator--fd863828-e45b-426e-9d93-4064254a6a7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0c43c8-aafe-4b35-ae9f-ca94dd68b66f", "sighting_of_ref": "indicator--e6985708-b95b-4640-ad88-0125bba446cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4411554f-0c0a-4a52-b008-b7477382fc77", "sighting_of_ref": "indicator--472b8ec7-94d3-42ec-8c59-3b6e2b150cc6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9ae4ad-94af-4618-b3b2-29a5cc1a2501", "sighting_of_ref": "indicator--c2de9275-c489-4694-a702-5e3fada401cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b423ba64-8723-4e1d-9db0-bab3d69a0160", "sighting_of_ref": "indicator--f2e22330-79f4-4cdd-9b1a-0ed33ceafa68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a8b1a0-16cb-40bd-9d53-4b1c6bb218e2", "sighting_of_ref": "indicator--17d6178e-6db6-440f-9a15-44c5b56070cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492452ac-6e8b-4349-b955-d2601201fccd", "sighting_of_ref": "indicator--8b5e9048-8627-42ae-bd4b-945065b2547a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524bcbed-90fa-4db5-842c-cda329180f98", "sighting_of_ref": "indicator--8b5e9048-8627-42ae-bd4b-945065b2547a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc43afe7-c446-4102-823a-d276dc72fe1b", "sighting_of_ref": "indicator--b59527c9-4bd7-4b7e-8f2f-e31e2a3bf628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a7d49c-d2b4-4d84-a009-24277179cc6d", "sighting_of_ref": "indicator--3bd7d709-168c-4a41-9d96-0ee8a423b9d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d2cb2-5e10-4ef5-b74f-8bba13fadb63", "sighting_of_ref": "indicator--3218e4f1-d702-4580-948f-d591460a5e77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1528f8-0100-405a-af94-85b50d9c6594", "sighting_of_ref": "indicator--7df0d3e1-e348-43f9-ba39-f7adae396796", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05b9e89-f54c-4ca8-83d0-041cd3ad1654", "sighting_of_ref": "indicator--a7475e7c-2291-45dc-9580-4eb0417a646f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa31bd1f-a6b5-4ab9-b2fa-dec14bd4e42c", "sighting_of_ref": "indicator--749da6c6-16f0-43af-b9fd-bf3e4134b948", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac054dd0-b0ab-4ae9-9efc-f93c916feef7", "sighting_of_ref": "indicator--67eda6d2-cbb9-42b2-b36f-616b4be40520", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af638a53-993a-4deb-91be-413daa8ac2dd", "sighting_of_ref": "indicator--0f5e263d-801b-438c-a14d-14fc5bb6f10e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedd360c-f337-4dcf-b68a-590d73a08812", "sighting_of_ref": "indicator--63480f48-9c1b-40d6-b05c-1e553e25891f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383a4ac9-f831-4eea-8bb7-b0b82da16da5", "sighting_of_ref": "indicator--eab6f37f-320f-4910-a2a2-4fdf54d31972", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359ce9e6-11eb-449d-9ae7-07038bdd6299", "sighting_of_ref": "indicator--45465823-9e0f-4daf-b573-6d7cb1b9563b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6bc47c-4281-4560-b85b-a8163c00c820", "sighting_of_ref": "indicator--e2ea6a54-8bb7-4e9e-9b9d-602552042484", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecc180c-83b9-49e2-b30e-77b1b2df6983", "sighting_of_ref": "indicator--1760ba9b-88c6-4bfd-8cc4-114f067f2dae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c134c3c-0a48-4c7c-9eec-e4d2d453ba62", "sighting_of_ref": "indicator--b04f2e1c-c9bc-4705-9575-6fa07deadd64", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad646c2-fa83-4088-a946-4bea5213b1ae", "sighting_of_ref": "indicator--e2b0b2ec-2cd5-4107-9570-1fdabf84ee38", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64107013-b529-456c-a244-5120df1950eb", "sighting_of_ref": "indicator--f196a9ba-c26f-4751-a8fe-7f86b348fbc0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00f3085-d3c1-4d72-ad44-fb6ee80235ed", "sighting_of_ref": "indicator--76f74f1a-3d89-423f-8fb1-8c11f68b6c22", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2869e55e-7c95-4a08-bbef-90258c19c39e", "sighting_of_ref": "indicator--527af007-92f9-487b-aea2-a87c528ea142", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8446047-9b9f-4dc1-8455-52f99d73c3bc", "sighting_of_ref": "indicator--527af007-92f9-487b-aea2-a87c528ea142", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e82b21c-39de-4355-ad09-c1f06da092b2", "sighting_of_ref": "indicator--15108b4c-299e-4fa7-bbec-daa91c0dffb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209d3c25-3183-47b9-8cfb-8859d02dc9b1", "sighting_of_ref": "indicator--b75cd6b8-42c7-4823-ab36-41c3f3c4caad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e5f8e-6b2d-4370-a7cb-c7427b09e2e6", "sighting_of_ref": "indicator--da48654b-0138-44e3-8d9a-4aa8b5088dc4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92b7ed3-7eab-4d8d-a65e-23dfdb5a5c64", "sighting_of_ref": "indicator--70f6698b-33d9-4b01-a82f-6b85d9f7262f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ee99cc-608c-432d-bcb4-5c204df32c17", "sighting_of_ref": "indicator--8c4f87a2-3b82-4769-a00b-0c8c632a8e54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f9a1de-6f3c-4806-ae2f-aafca0a25d2e", "sighting_of_ref": "indicator--366cbd3a-8592-454d-9158-26c3a8b507de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7d7714-87c7-427b-acd1-a3763dfdaaa2", "sighting_of_ref": "indicator--bcc5c38b-4e30-42d6-a73f-274636cc5311", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f30df9-a456-416b-aca5-7cabc9470d73", "sighting_of_ref": "indicator--b117553a-6378-4268-8c4d-3c1317f2c3ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2666fff-edaf-434a-b33b-a4feb7ba41ba", "sighting_of_ref": "indicator--1029eef4-e74f-4ad0-981a-7f5a87cacf97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e922212f-ba30-4467-a4d8-a1743d44d029", "sighting_of_ref": "indicator--29a9c11b-f293-4cfe-9683-12361591823a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961ea1b9-d61f-4927-85dd-4b1a1a08f35a", "sighting_of_ref": "indicator--29256c94-f3b7-4d70-ad8b-bd95ede0c619", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0b2605-61e7-46d3-a952-76033fa50bec", "sighting_of_ref": "indicator--cfdd937e-ae20-4cbe-9d14-f38b808b09ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0d1ed6-e8fd-476f-a95d-595763471712", "sighting_of_ref": "indicator--2b1da298-ccb0-4066-880b-eddad9556ee4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7792e6-af9c-4812-8ff3-714e1ea65794", "sighting_of_ref": "indicator--8c4415c4-6a6d-4345-a345-c13a055317e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a367b72-5efb-4c53-92b8-ec17cc45efba", "sighting_of_ref": "indicator--cb0e091e-502a-4a3f-a1a4-959ac10bf05d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85be007-7975-47fe-b1cf-abc1ed1cb9cf", "sighting_of_ref": "indicator--bec6ba21-1e3b-4cd8-88bb-d434f7e28ae1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7df029-8cef-4613-b5a3-ebdc9bf985ba", "sighting_of_ref": "indicator--cca44f42-fb03-4bfd-9661-1eb11e83d01e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b38fe8-5d9b-4ef2-bbfc-3f09532cc6aa", "sighting_of_ref": "indicator--652ff2be-0a9d-406a-b47f-2088a0ae331c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0c3244-14e8-47a0-9e32-f6db641d49e2", "sighting_of_ref": "indicator--4340fe26-f15c-4124-85a1-9534b24c5076", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af8f5db-ea5c-4bd6-98f8-cf065ad83bcf", "sighting_of_ref": "indicator--65e6f736-25da-45b0-89df-02336e652399", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a204e7c-35db-4aa7-b2c3-fa66d44cbe0a", "sighting_of_ref": "indicator--69468499-72f9-4a1e-a095-7158ac928496", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adada6b3-eb13-4437-bffe-ab6cc2def58c", "sighting_of_ref": "indicator--8ebc75a5-cb92-4936-b269-7cd15e813f67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4106a420-c088-44c4-a51a-e8899ca06b4f", "sighting_of_ref": "indicator--033ea69e-28ca-45b9-b972-cc3d993be938", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bb0443-1347-4b81-9946-6721693d8673", "sighting_of_ref": "indicator--51d91a24-e96b-44ac-886a-916379ca191e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26842f65-a19e-48a8-bb07-b40f287fff0a", "sighting_of_ref": "indicator--745243e3-4d80-4ee6-90f5-1a5ffbc1ce33", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0415dcf-e873-41b3-9ae0-33e48bb8abf3", "sighting_of_ref": "indicator--d160698f-4bb9-4e1e-9a57-2c89a9a32be1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127102b7-f00d-4b6a-8603-de4defe64998", "sighting_of_ref": "indicator--5e3dd13e-25d5-453b-9e77-9853f03fb047", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142daad3-36be-489f-a831-d4377b9552e4", "sighting_of_ref": "indicator--61757f7f-97d4-42c0-90c9-871b0585657d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10f5630-6b9d-4ce9-b60a-b2d6f8668a49", "sighting_of_ref": "indicator--7c024757-005d-4eb0-92e8-c1399c9c8dcc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f50eed8-c5f9-4143-815d-e74c4a82b59b", "sighting_of_ref": "indicator--e08c76b3-4c7b-4e0d-ae8f-01a636b64d14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79256e91-e572-4928-8025-c1e801618bf3", "sighting_of_ref": "indicator--85aa23be-a6bc-490f-9f36-6a8498300b69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a145d79-c3ba-4b32-8eca-1650f2673d16", "sighting_of_ref": "indicator--4c043a27-b22c-4bbe-9b82-9f261bcc0afe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccd9a87-1dc0-4149-acf7-9744c26aa638", "sighting_of_ref": "indicator--4c38ac70-6aa8-4924-a00a-01905a27ebbf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff721f8-67e2-4f96-8559-3b6959b61d72", "sighting_of_ref": "indicator--e021fd94-c59f-4f9c-94cd-362272e4ca98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8944b68-7a80-44ba-b4da-08cb08dabe45", "sighting_of_ref": "indicator--928eee97-a58f-4485-9327-24cbcd4bddde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90635b7e-62b7-424c-b282-f2f8ead11484", "sighting_of_ref": "indicator--79301fcc-f127-471a-9c14-6df0a6721d47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ced1a9-d6cb-45cc-a749-41d291bfb500", "sighting_of_ref": "indicator--72d58743-5469-4f63-8b65-284669a11a83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a082af-7123-49ae-81a6-9126b396197d", "sighting_of_ref": "indicator--b737bdd1-52e8-48f4-a71e-a8fa0af5deb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cdc425-9d3b-4266-a26c-11fc7f82e3f0", "sighting_of_ref": "indicator--5861126e-38a1-444d-a7cb-0d5ffeb53228", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c60d58-0bf1-447e-b1dd-eea90d1eb11d", "sighting_of_ref": "indicator--b53c0593-7e5c-4e59-8902-a88e690ab9b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b72730e-28c5-41ca-bc56-bcb77a398aed", "sighting_of_ref": "indicator--d273d573-d4df-4641-b7c4-b1dba8784f20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfff45f-ea8c-43f1-941b-42d545af1212", "sighting_of_ref": "indicator--7fa0050d-e990-49b8-8c3a-08ffc813d2f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55bcbd3-8a3a-4fe2-88d8-d89c382b9d73", "sighting_of_ref": "indicator--211bac29-fc19-4ba6-b8c0-81babaa3ceb6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94493f77-f023-4f23-9cdb-773533aef822", "sighting_of_ref": "indicator--e3a93888-b108-48f8-a05b-a4a9b5281c95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d508a-e3fc-4e38-8084-c9f07e770f26", "sighting_of_ref": "indicator--41498fc8-7a95-44d3-aedc-83d81519c656", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42e6987-d2fa-41a3-b47c-b0a55a4dd40a", "sighting_of_ref": "indicator--a3c0a65a-f32d-426e-ba97-996268fa8047", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57ddbf9-fb13-428d-94e5-20127f2a5c95", "sighting_of_ref": "indicator--45e20206-5a4d-420c-8c18-5c31eb182d74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a65c91-63c3-4628-b3d7-04330812f7c3", "sighting_of_ref": "indicator--52512534-bdca-4ae0-86cd-f066e52d35a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a112a8-dee9-48be-a42c-150bac6339ff", "sighting_of_ref": "indicator--18a445d5-8633-48e0-a535-1f699e562f06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f29b24d-bb1e-4cc8-bcc8-f5ac5dc94317", "sighting_of_ref": "indicator--66f89a4b-c704-41a2-97d9-063a2047a430", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed30c7d-5007-41ac-9aec-8b6fbc96ba70", "sighting_of_ref": "indicator--2fe526a7-1aac-4e89-a27f-0008fe857a10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee85b69c-d9db-4f5d-b0d5-47eb895bdc8b", "sighting_of_ref": "indicator--4b8a8811-5ee4-4f3d-ab31-47230c3a637e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cc6149-5856-4623-ad94-1eeac64be3f5", "sighting_of_ref": "indicator--3eddf579-01ad-48c1-af15-c79259b83a7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894c229-3ad1-4d3c-a638-d10eeb7fd87b", "sighting_of_ref": "indicator--830d29c6-79ae-4240-827a-9473dcd48456", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae5d5dc-3a93-42ee-bd8c-32e5306d01eb", "sighting_of_ref": "indicator--c07714f6-7f28-4b04-9ccc-960cf7a45012", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1873e51b-fd39-44dc-afc8-75df85fa2c9f", "sighting_of_ref": "indicator--bcacc268-cdaa-4801-8bff-5f6224adb9c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2944796c-9387-4f4f-ae86-ec37404c86ac", "sighting_of_ref": "indicator--3040b23a-9579-4c6b-968a-3dc5d6390855", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f21b6ff-91b4-4d90-b043-bd0c77965ca3", "sighting_of_ref": "indicator--14c8f056-7363-4699-a7cb-b3bd7be6c2f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991a7aad-8f72-4dfe-b35c-9ada942768a3", "sighting_of_ref": "indicator--9e84d434-e16e-4114-9bcf-aeb9e860c650", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438871ed-d192-41ac-a003-4df8ee553bba", "sighting_of_ref": "indicator--358683f2-40c6-46aa-90d8-b6dadcb5b781", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29ca8cb-0a01-42d2-aed9-fd087e5cebd0", "sighting_of_ref": "indicator--b9018b68-1b3b-459a-b180-2c9b071d8f1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62eb3444-8616-4de2-a7c8-48f4a9003ae3", "sighting_of_ref": "indicator--be4780bb-8726-452b-9237-32661a03dddd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322fc55e-2b6b-4140-a1a0-4025d5e7e890", "sighting_of_ref": "indicator--b7352b90-1b88-4617-8651-4b8ad7149c76", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a37bb2-ad8c-40c4-9ee7-4881f6e27d5e", "sighting_of_ref": "indicator--ec057ef5-5f70-4373-8722-4ed977775d93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6cf707-e7d9-4082-8149-0327cf39f1d9", "sighting_of_ref": "indicator--167d190e-a9b4-467f-9454-efb7dd8e4023", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac3970c-f058-4d89-b04b-b3e20d7beca4", "sighting_of_ref": "indicator--2461d52e-da4d-435b-95c9-282cfa756335", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23823042-4966-46d4-9bb7-cf13c839ba0d", "sighting_of_ref": "indicator--0b737608-f6e1-4fcf-ba87-172c1a38f5d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b5ac71-1ad0-4c23-bbb1-618111dc18f5", "sighting_of_ref": "indicator--4240842b-1ca0-4b28-847a-498bd4250a9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e050ff-1d2c-414e-b07a-182d357d8b1e", "sighting_of_ref": "indicator--7ed264ac-e0b4-4aa1-ab27-79f16caa0ece", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b4e878-393a-405f-b7e0-75a7747d451d", "sighting_of_ref": "indicator--bb92b4f1-856d-4e38-85ff-4dad19b35060", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084de7df-177c-4ecc-8f4f-053c56d00bbc", "sighting_of_ref": "indicator--740e237a-a55f-412f-8f3b-943988fdc495", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a30052-9e1a-4988-974b-c5be8278bc37", "sighting_of_ref": "indicator--13bf7e8d-0d63-49bd-8c7e-199054783d65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd2b359-bf62-46a6-85fc-08b3d0cee0d0", "sighting_of_ref": "indicator--e14a991a-347a-4d03-ab52-2bb76dad755b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4f2339-20ae-4586-b437-644574a1c7be", "sighting_of_ref": "indicator--8de5e66f-be1a-4062-b15c-870b07c295fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60018620-3345-48b9-9313-1c09cec715c7", "sighting_of_ref": "indicator--cd9a9222-14a2-4b6f-83e7-12af857da12e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4cc9fe-70b5-4ceb-ac58-2e81f00bd98c", "sighting_of_ref": "indicator--13801e73-f6ec-4e71-9e32-c14007ec793d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9479570-3a8f-46d9-bd17-8de61bf5f728", "sighting_of_ref": "indicator--2bff32e0-d22d-4678-9770-31313a55cb09", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c7ca08-172e-490e-abc7-2bdc2d4d7e1f", "sighting_of_ref": "indicator--dd94b193-b093-483c-9a1d-b911b14903b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bbe451-88be-47fc-b239-c68526a0e23b", "sighting_of_ref": "indicator--9317de1a-9166-4295-90f7-9e79500380d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2231c320-8cfa-4b77-8c97-8b5d0fae8ec7", "sighting_of_ref": "indicator--f7f73e74-2b45-41de-96f9-0dba8ff8d7d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917ec979-37f3-45a4-8a3c-12c8814a3834", "sighting_of_ref": "indicator--03577833-ff73-47c4-af25-9b609cc591c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7c54eb-7f4e-4d78-bf90-070b6a4e3c81", "sighting_of_ref": "indicator--6cc86aef-d695-4b3c-a9ae-14db01349b82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105fd230-c21c-4eb4-acef-153f83452b7a", "sighting_of_ref": "indicator--8dfaf91a-5247-4b34-9875-b04c9be42d26", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5060ca-7771-42ee-9433-0ab530925f96", "sighting_of_ref": "indicator--0cfd154f-750d-497d-bc16-6f139c4b226f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab34eb3-befd-4760-9710-9a8fa8c53790", "sighting_of_ref": "indicator--fd6160c2-3a67-4fa5-8654-342888d5149a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8199f4-a638-48f0-9f97-dd801546a831", "sighting_of_ref": "indicator--a21de440-b86e-40fc-aa51-15de6895f740", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcb3ab0-8708-4d48-b0f6-41e805c3a7cf", "sighting_of_ref": "indicator--68d97ef1-eff7-4ae5-b06a-ecc144acc2e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b595fd1-5760-4055-9e76-8a355b830e08", "sighting_of_ref": "indicator--17920d2b-1777-4ab8-b276-045abfe0a7d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010d852f-38ad-423a-9f96-c603526f83d6", "sighting_of_ref": "indicator--7f97dadf-55c1-4948-a6e9-b13f3a8e9c15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b91e67-2eb3-41ee-9c37-174836c2010e", "sighting_of_ref": "indicator--fe82d5cf-719e-4d29-a531-7c65d24023a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e707439-3254-427d-a5aa-db61362d93ec", "sighting_of_ref": "indicator--1f9c070a-9f6a-4b75-94fb-b52ff5b62441", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ae3aec-e456-46d3-87f5-7771771bd831", "sighting_of_ref": "indicator--14118b94-793c-478a-9004-b9903e2eef76", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac307b3-720a-4b6a-85f0-61b997fa3deb", "sighting_of_ref": "indicator--a9118259-2a4f-4779-a78a-209cf9111e20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9a6eb9-2e6b-4821-ab9d-32e5b8e2b7c7", "sighting_of_ref": "indicator--985a6b35-7d15-4b31-b03a-f0cd59d155b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468eed35-0684-4a90-bf66-d2413a40f7ad", "sighting_of_ref": "indicator--81bb8cae-1061-4c41-90bd-53ea2eda97fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f4f68f-b40c-4afb-aa19-89879c6fa668", "sighting_of_ref": "indicator--e859465d-fd8b-45d0-ae1e-07a159e31e30", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad714e9d-a56d-40f9-8337-9c7cb8cb1e73", "sighting_of_ref": "indicator--b25e4d36-c71e-41ed-94b0-283afd5e6f3d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc99c2f-65d7-42ef-bc2f-5181d2c8f5e0", "sighting_of_ref": "indicator--45ebb615-2846-4c45-9f60-88c1d5368d75", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef9d135-3ccb-4040-95cc-b6ad00cc3c62", "sighting_of_ref": "indicator--b9f78c7d-a831-4134-b6fd-9e36f11ac96c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6900f29-8f4c-4e97-aae5-5ae7e3166103", "sighting_of_ref": "indicator--e354c705-f42b-4e9d-9df2-4fb8ad6c295e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cbac2f-649d-4599-9f24-ab69a683e413", "sighting_of_ref": "indicator--6bfac264-9db3-4375-9222-98a3f624fb19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1026f175-9883-4ff2-bb67-d831b71d7dec", "sighting_of_ref": "indicator--1fd8fcb7-3081-4f64-b7c9-78359cd35b94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddea4c3-6c1f-42ec-b6b0-245cea19afd4", "sighting_of_ref": "indicator--6fbaa046-aac0-41ea-b030-288bc7c06e14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6e28d2-3bc0-4b7b-a13a-b913349efcfa", "sighting_of_ref": "indicator--2e99ba7a-b0e7-4e5e-a7d6-fa5cb29b5214", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed7d62-52ca-4ac7-a7f1-826b0cf32e2a", "sighting_of_ref": "indicator--40201959-eeaa-46ab-9daa-b47aba1c5440", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb70ed0c-a902-4c10-94e9-85f0b73e325d", "sighting_of_ref": "indicator--50097b3b-2383-455d-8a32-78c173be79b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680e9cee-d83c-4194-92b2-266907bcc95a", "sighting_of_ref": "indicator--dc3c90b0-5574-4bb3-9094-3ddfed92aa3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f38705-f2e2-4282-9127-04e9116af695", "sighting_of_ref": "indicator--685b8694-9764-4c0a-86f5-d21c0ede0653", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53d1eb6-1b43-4191-9d92-abfaf0096f1d", "sighting_of_ref": "indicator--10b6d153-3d43-4d93-aac6-0876f2a0ad67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b60a36-1ac5-4b0f-97cf-0fd5e2342f77", "sighting_of_ref": "indicator--82b135ee-ee63-4c54-a3f8-bc83c6cc8854", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d4c2f0-0384-4262-97c3-6425a218d4f6", "sighting_of_ref": "indicator--f092bfba-6496-418e-aa4c-599fa1b7e61f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890c10b8-4d5b-44d5-abb4-719b4f41e755", "sighting_of_ref": "indicator--ef1b78cf-e795-403f-8975-bafe310bdf52", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b68c6a0-6097-468f-837a-66d3a098f168", "sighting_of_ref": "indicator--81782cfc-a2b0-47b9-bc70-168aff015d81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624c7c6c-f139-4a04-8420-2ef8a8463e5d", "sighting_of_ref": "indicator--1123ee5b-8792-4602-8235-b9b51a4e4805", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749c6dfa-3c41-426e-b6ce-8bfec71da4fc", "sighting_of_ref": "indicator--0d31b4bd-4965-4c91-a00a-05989323a669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5762dd5-2ed8-4e2d-91c3-73c7fdc2e053", "sighting_of_ref": "indicator--e03d5439-d395-4a95-a486-ac9d7233b128", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf84efa-55dd-4e98-86b7-93dbf78c38a9", "sighting_of_ref": "indicator--403e8c43-7633-4909-a24d-87016e43cfac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6965d141-a7d9-49c9-9ab1-963e611163ac", "sighting_of_ref": "indicator--be6ddef9-6eac-4256-aed9-d54d8400aecb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860114e-afe2-4be6-93db-7efb3dff9239", "sighting_of_ref": "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82523582-d777-4442-a575-ba5719027f20", "sighting_of_ref": "indicator--5e2c09f0-01a1-42e6-b745-5762e9a570cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0b2c15-7581-4d5f-bdc6-dab9c946d19f", "sighting_of_ref": "indicator--f34561ca-9859-4a9e-b37c-cdf45a87e6c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc00ab6-94eb-47f7-abfb-5a95792b7d59", "sighting_of_ref": "indicator--0a0db55c-0a48-448b-b825-bc14436a8d34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b162c7-4b5f-4d99-b124-7974bd99d4e1", "sighting_of_ref": "indicator--0d9223a0-e2e9-4a9c-a557-dd9e6a295ef7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b0c8a5-b8c9-495d-af5c-b2eb4f5f81f9", "sighting_of_ref": "indicator--4d497871-db2d-4fbc-8ab6-16e9d5473883", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4653bce6-633b-4240-b7db-8dfd95048947", "sighting_of_ref": "indicator--3a95a50f-2790-4158-848a-42d48c5fac61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185b8887-5729-4ebd-9085-1220b918fef4", "sighting_of_ref": "indicator--7fc16ac5-1ff2-45e7-ac77-528b1ac70156", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b71659-4c79-4c4a-9e82-89f4d9e5dcfb", "sighting_of_ref": "indicator--2fece384-eff1-4600-ba0f-bfe2de1b396e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a27f058-69c0-43eb-b10e-983654653570", "sighting_of_ref": "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ceb639c-d7a2-4d3a-92ec-e227a4b27f4e", "sighting_of_ref": "indicator--5bcd4cc7-65cf-4fe6-b343-ac9b085a890b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591b33d1-5363-4659-8ba6-c2f9a43d6f29", "sighting_of_ref": "indicator--b43898c4-141f-4c15-8246-226afb7d0a07", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3d6ad3-b0aa-4fbe-8aa7-1856b500634b", "sighting_of_ref": "indicator--514b34f2-6fba-4fa6-a362-a46871060288", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff72c6f-b0c0-4842-89c2-abda05d1cebe", "sighting_of_ref": "indicator--52c39738-87eb-4474-a059-0057f1993e8d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7137bc-0a30-4a3a-ac4f-4e94aec0d6a6", "sighting_of_ref": "indicator--86a273a4-8418-4965-8c7c-a6b0240f242d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17babe8-3bdc-41a7-a834-36f88e3e653d", "sighting_of_ref": "indicator--149eb9cf-8c32-4aaf-bdcf-661c1041a4f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189dce54-13a7-41c1-a2e7-b71baefae649", "sighting_of_ref": "indicator--0440cf28-6335-4ab5-9acb-2e4cfb5d859f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abe32e3-a7da-4c93-b852-9b312c880ecf", "sighting_of_ref": "indicator--885e2fee-21ae-4f20-b1c9-f21022fc7692", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d13851-112e-4ff0-a98e-47f57540e349", "sighting_of_ref": "indicator--4d3c43bb-8055-4a3c-bc62-82bf22b49b1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ca9440-edf7-4401-875b-3554057723cd", "sighting_of_ref": "indicator--6cf002cf-0ae9-40f4-ab19-c1224002c244", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5d4e0b-04eb-4172-8977-8cf41fea9e72", "sighting_of_ref": "indicator--235b2e95-a2e1-42e1-945f-d72eca4f9f9b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f37f2cd-084e-4821-9bde-885bce215ade", "sighting_of_ref": "indicator--aec87b10-171b-4877-ae9b-65c70523e0ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8da23f-6163-413e-a669-5a2c8fc372ac", "sighting_of_ref": "indicator--e5157c31-947b-412f-8741-4655ec455201", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51977d7f-2851-4495-8fb0-95261ab1f7f9", "sighting_of_ref": "indicator--1490a87e-1487-4b8a-9819-b8f2676d7d77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210406a4-b801-41a4-8ba0-798d1b5a2992", "sighting_of_ref": "indicator--8829045c-d4a6-4a56-bfba-46e3eba479bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00de9537-6cd0-497a-bb94-b371e7808182", "sighting_of_ref": "indicator--7c714040-3779-4943-9275-1bf37f7f558e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f5b350-1bf8-43c4-a1cb-e95a689a9439", "sighting_of_ref": "indicator--8673514b-35ce-48f7-aef8-b0a6a2ba3f44", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9507b7-49eb-4378-8df0-a6e45c8f61b4", "sighting_of_ref": "indicator--b120113f-5c99-4026-969c-e44e020f3372", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024a383e-2825-4c18-9600-1935d28d3d3d", "sighting_of_ref": "indicator--31969e8a-bc27-4655-b69f-01b955cdb7e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58017f66-56b2-45df-afad-0032a9245f25", "sighting_of_ref": "indicator--b3ee12f4-3caf-4a16-a2ba-b045604014fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590320af-df8f-4b77-ae52-2c037fa688c5", "sighting_of_ref": "indicator--f7701faa-999a-47ab-939d-36c3a915d7ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21f3a6d-2ba7-42b4-a88c-8daf369b3e85", "sighting_of_ref": "indicator--76c4897e-6d92-4727-a4b5-ef89263efd32", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f71258d-70b9-4115-990e-c6b0e9d11c1e", "sighting_of_ref": "indicator--7629d3fb-ba83-43c4-82e0-fbd7aa74750a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd326bcf-2c95-45cd-ac9c-938ae1862c46", "sighting_of_ref": "indicator--339f0e77-ce4a-4889-a72e-4fd566d38ed9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87137e62-3aef-43f9-a382-30fd6445a8bc", "sighting_of_ref": "indicator--fe3bbc12-c8d5-4efd-af1f-253a86b15bf1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ea5326-b3a5-4934-bc4b-a795cee9577d", "sighting_of_ref": "indicator--4322536a-9809-451a-a8e4-7844a00333fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774ced61-412a-47da-88ec-b4fb44cc41db", "sighting_of_ref": "indicator--7ec20c85-2587-4f7a-b424-8cf68b1181f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ce1cc9-b5cd-4732-ad3f-1c076f69eb41", "sighting_of_ref": "indicator--625c01d0-d74d-4708-b7d0-1b233a81a6de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b43b4-e8ed-4734-8f4e-826c3c1dba20", "sighting_of_ref": "indicator--2d9ebbf7-cfce-4342-8785-dd0126d634bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1e181c-14b0-4687-be4c-d450b800dd74", "sighting_of_ref": "indicator--2add0310-761d-4c18-9541-01b12ac68631", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706eb35b-6491-401c-b3eb-9e87f56bb2cc", "sighting_of_ref": "indicator--ce0c178c-cc93-419b-844a-91cf2315fdd3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16951d43-2201-488e-99f9-57cbbb7a86d1", "sighting_of_ref": "indicator--c656c5fe-5ea7-4c79-8196-c9ba40217839", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be01c460-a429-4aa6-a73f-5d348ed3e554", "sighting_of_ref": "indicator--3c978073-d7e0-4ac3-ba3b-01c6b9471d02", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c81ff0-68b3-4b4e-9d9f-5d0690cde22a", "sighting_of_ref": "indicator--1da99833-40d8-4bae-a44a-9168d1bf0d3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18721b2-b08a-4f84-b8be-5f1001cf1053", "sighting_of_ref": "indicator--ea811e04-6f6d-453f-9ac3-60c8fde8688e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c9e56e-834a-4180-985b-402c499aa2ea", "sighting_of_ref": "indicator--a91f6df7-3ced-4c3d-aacd-734d1aab16de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bf7cfe-cad2-4ca7-9e31-4887a0f2188d", "sighting_of_ref": "indicator--e187b00d-2e12-4a49-a5da-259995c694f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff97756-5633-4d05-9ec5-dce5e0a63bed", "sighting_of_ref": "indicator--34f66342-e89d-43ab-9e67-99d760f2e581", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f70c76b-6f21-48ff-a87f-8cecd88c6491", "sighting_of_ref": "indicator--deb32fa2-f241-4fd1-a6e5-0ef59909c31f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ff27d8-0c4b-4fbc-9f31-1ae0e64ed773", "sighting_of_ref": "indicator--e3e54aae-e64c-4567-a8bc-993409544fdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bf7f59-0bec-40c9-b156-32ee831ef19b", "sighting_of_ref": "indicator--b6c639b2-ac73-4faa-a9f5-92ec4d42c265", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d374620b-fbc0-4ba6-ad3d-0b4b3a4851e9", "sighting_of_ref": "indicator--93280d62-7cf6-4799-9711-d0110b88b2b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8926eb-8166-41e1-9c2d-b18d90797af0", "sighting_of_ref": "indicator--ca54f8a3-239f-46a0-9cf9-f2d277095556", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221e4b60-fa4a-4bc4-b3bb-355b57f3e12b", "sighting_of_ref": "indicator--efdd38d8-dd48-4602-8a04-1af2b1c5ad23", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed127c7-ef4a-485f-b9fa-bfd581592ae1", "sighting_of_ref": "indicator--6df9d1ad-6522-45e8-b7ce-8e24bf149e68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c978a34-6d76-480b-863f-e26cb90ccb21", "sighting_of_ref": "indicator--0a6c5d21-5658-425c-b405-8c877ca9622f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c513a3-ad25-4239-b898-f727f13a80ad", "sighting_of_ref": "indicator--ba881c08-ebae-4218-abf9-d41ec62ffccf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feef543b-738e-4b54-a4b8-9ace48c8cecc", "sighting_of_ref": "indicator--75fa0590-cee3-480b-849a-d3d249739767", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf96da44-6605-4666-bb33-448bc88104b6", "sighting_of_ref": "indicator--08ac6b37-0d92-45e1-ac5c-0eeb94b66068", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc54e292-5407-4332-bf65-ebf65bb486e6", "sighting_of_ref": "indicator--592e863d-0aba-433e-b660-548198382d2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96116635-fa87-49f8-9d78-668e04100255", "sighting_of_ref": "indicator--da25f06d-392f-4a74-8276-fafe4f589674", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b034ada-ea9d-4c9e-bd1e-4affb07fb765", "sighting_of_ref": "indicator--d69ea936-544a-4bc7-8c70-570cd7eca70a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66028895-6118-401d-a17f-fe0332fc1fd0", "sighting_of_ref": "indicator--042ed8c0-69be-42b6-b21a-c40965d5ac62", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1b575a-542f-4644-a09c-c42a118d323c", "sighting_of_ref": "indicator--efb4df8a-3fe5-4f5b-bedc-4a7d6e5b2777", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77c871-311b-4971-9b2f-e958d5add527", "sighting_of_ref": "indicator--f2cdab03-36a6-49de-a4be-eae6374df3de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49586603-ddf4-4566-b8fd-10816f81cb65", "sighting_of_ref": "indicator--6b67e751-448c-403a-a69f-e3849b23190f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93db7813-2025-4540-9737-19b6595f5f72", "sighting_of_ref": "indicator--e578d87d-4cad-4b7c-b244-5bc4efa3bbab", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58656033-065e-4e82-8476-bcf03f3e0144", "sighting_of_ref": "indicator--c4c930d0-2b3d-45d1-960d-f0d303ac5e16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a568085a-9db0-4bac-acb4-37b436bcc15a", "sighting_of_ref": "indicator--d96b62bd-b285-455e-89d5-dafa252bc2b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e69d49d-6294-458d-8404-44d083e8ac56", "sighting_of_ref": "indicator--753535a4-f87b-4566-b3d5-3fb8f00ab692", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43e3e75-1d7f-42c1-a9b0-a19359c57915", "sighting_of_ref": "indicator--ca722e2a-512c-4826-8920-cf53ab9d526b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6e0cd0-7a5d-4222-9591-efd1c75376a0", "sighting_of_ref": "indicator--71fbdfc0-737c-4366-8360-b65129cf7eb3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bfb50e-4563-425b-bf1a-b30b91736e2c", "sighting_of_ref": "indicator--049dcb4d-01b6-41a6-8723-0c2815702097", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fea7fe5-03ca-4501-b491-1d834b78667f", "sighting_of_ref": "indicator--981b0316-9b6c-4732-98ea-2c67288bedac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c52410-fece-4d83-9002-cff3d510c219", "sighting_of_ref": "indicator--77c842f7-2ce8-4e85-a4bb-34cd05ecaa3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e58f2ee-2cae-4232-b800-513b878c482c", "sighting_of_ref": "indicator--da39b961-1360-49a8-a828-2b26a60fc63a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc60690-6874-4f93-bafc-019e1430f1ce", "sighting_of_ref": "indicator--7c817ef9-8c62-4a1d-a53e-4be4dc4f407b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3db381f-35af-40a3-9168-afba21d6cdfd", "sighting_of_ref": "indicator--eba84c28-96c7-47a2-81b4-526245364e0e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d1a904-4cae-41c6-894d-5606eb326954", "sighting_of_ref": "indicator--7d4cba79-80b7-43f5-b21d-a029890f874a", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05914ef5-522b-4949-9f7b-9e1f74ee23ed", "sighting_of_ref": "indicator--dfff125f-5ccc-4687-850a-411e6ae759f0", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8edfbf8-f32b-4048-b966-86b9d711b8d5", "sighting_of_ref": "indicator--178513aa-5bff-4bb7-99c9-5e6822bc409e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eda4007-cfdf-43c1-8bba-4a920b23c30a", "sighting_of_ref": "indicator--4d79104c-1d30-4491-bb0b-e370ac0940fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4316b37f-f9a2-4137-9b9e-7167773d7c40", "sighting_of_ref": "indicator--fea6e16c-b7f8-49f9-8760-1924892b1de9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ff55c-5ec2-4299-b349-73dcbca347bf", "sighting_of_ref": "indicator--a9c682c7-c9f7-487e-9d6f-4b1cf677a4fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30e2d6d-e9d8-49cf-924d-5e763cc2d42d", "sighting_of_ref": "indicator--6bb5b7e8-72cd-409a-9077-da5a62ba0ec0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b9f0a6-4ba7-4674-ad07-d8f9b5b04b5c", "sighting_of_ref": "indicator--46cda1fd-461d-4109-ab82-393bfc2da148", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82efc07c-4b7c-488a-beb9-2d86a791d134", "sighting_of_ref": "indicator--bde7063e-42fa-4e96-98f8-6c91a57d15e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6d2cbf-156f-47f0-a6c3-0ccb6e08fa26", "sighting_of_ref": "indicator--5569be66-df9c-4109-a519-3da233100324", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b16eb1f-3bc0-4d36-8d30-f0d035dc485e", "sighting_of_ref": "indicator--7fe09d0b-1cbe-4305-9ed9-abea783cddc1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545179cb-1962-49a3-a9d4-91834f8ba846", "sighting_of_ref": "indicator--6188ea5a-0730-4666-82a3-7b4877874cd5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f2057f-feb7-4b12-97e9-37bffef1c8be", "sighting_of_ref": "indicator--5e67e655-cef6-490f-b7bf-2eca72464c94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc9db26-c072-4046-a2b8-7b54cea57b3a", "sighting_of_ref": "indicator--0b8deb9c-4178-451d-9fb4-8997afa27018", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938ecb2f-9f5a-491e-9cf5-1350db732489", "sighting_of_ref": "indicator--f0979300-0f01-403a-8743-1a43130f87db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ea1449-d578-40e3-91c5-af9200183248", "sighting_of_ref": "indicator--58f940cb-3b78-4079-9528-8ae0bbf91d9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e56d78-d0be-4c7b-93d9-921088033fdb", "sighting_of_ref": "indicator--f721d7c1-646c-4cc3-b64d-1c52506c7b86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa006954-5225-41b5-8c4d-9c3b57d8801b", "sighting_of_ref": "indicator--725a722d-3761-4f3d-9dac-7bf5e4e06608", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1a8f7c-6578-4378-9448-b4b1e7488abb", "sighting_of_ref": "indicator--f77de32a-1277-4fc0-9a4d-8bc39b091fd8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4552426e-e93b-49ad-9f12-79b912ba93f7", "sighting_of_ref": "indicator--cc8e7ddb-d264-4fe2-b517-1c3b84b07f5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec165fe-9dac-4d4b-8e12-253314707a7b", "sighting_of_ref": "indicator--04bd99aa-9fa3-4797-b255-12feb66e6727", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcc6b9f-8025-4dc4-bdff-1f7808fe28ad", "sighting_of_ref": "indicator--d7435306-0922-4d36-900b-6c8169ad6ff4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cacbf44-0316-4fe4-a3ba-449e0d54a0ed", "sighting_of_ref": "indicator--f53a0579-70af-4f2b-a424-2b906e197095", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28493fc2-c8c5-427b-a25f-dcfe2141210d", "sighting_of_ref": "indicator--faf92b21-49ee-4d5a-84e0-cb0ed5c6d900", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591f932e-54e6-41e1-ae44-ecfb55ae0cd4", "sighting_of_ref": "indicator--9aede7ae-ab9e-4580-860a-aba913254d5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e249d11-f9e1-4f62-8b8f-29b7b731baeb", "sighting_of_ref": "indicator--f8c4b4e6-0575-4cbf-a87d-20581f210b57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a37701-dd51-4646-9035-cf81716d0c77", "sighting_of_ref": "indicator--389f44b9-9b49-4075-bd2b-0ee2e35f649e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae484b2-e5cf-407f-99e2-88da8be25874", "sighting_of_ref": "indicator--436c49c2-ff6b-49a1-ad2d-25eaddd85e03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5675f9a0-f111-4ace-9e44-1297dc84eeee", "sighting_of_ref": "indicator--ad748ca8-3e19-4c4f-8f0e-c17ce42dfada", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae468d23-5499-4714-ab26-766f3879c691", "sighting_of_ref": "indicator--32abf020-00bd-49e7-9d6b-ffeb66198b30", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec29ef7-1a4a-466f-849e-ba06aa82948a", "sighting_of_ref": "indicator--fb95d633-261e-4bce-bf8a-7f719b491964", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c6794f-4ce6-4e5d-b9f4-23fbc6d0a449", "sighting_of_ref": "indicator--7af6d2c4-12c1-4307-b113-3d207a67f6b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64e4797-9ff8-4c04-8bc5-4a6f5010cc67", "sighting_of_ref": "indicator--d6eefef3-f1cf-4e0e-9ce4-037126337835", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2600f3b-0aa1-4723-be2d-68064c2e587c", "sighting_of_ref": "indicator--6dbf9525-9bf8-48ac-82c4-27e37a278c1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b162e136-89e8-4b96-a2b3-f9b2a07fba4b", "sighting_of_ref": "indicator--c2f59808-7f66-4f78-bf0d-04bf8bdcb308", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8baba5-94d6-4eb4-b467-ce7b6d4a541b", "sighting_of_ref": "indicator--f00d7ee1-225d-44be-9ad0-0a73a3bc3dc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70675bd3-f8c5-4dcc-8d2f-4bbbc0a49845", "sighting_of_ref": "indicator--0a67848c-884c-4fe1-8450-8ea4c218193d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d00377b-6ee9-41cf-88db-90fbb394bbc4", "sighting_of_ref": "indicator--11f12928-7ff3-4119-bd31-af28ee36853d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d38d87-88fb-4737-bfc7-6d3eacec1b6a", "sighting_of_ref": "indicator--25510fd1-64a6-4d0c-815a-c35ecb9acab0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5be34b-6f31-471b-aed4-74a2a18012ed", "sighting_of_ref": "indicator--d8a92f0d-bba9-4bfb-aede-b7b305b7d087", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bce19b-64dc-466e-bd38-18dda6b1af43", "sighting_of_ref": "indicator--d92e6432-60b3-4d75-a987-a26b281ffca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b1c0ca-4134-41fe-b6ab-f92d4f36a7c5", "sighting_of_ref": "indicator--fcb4e6d5-323f-41ca-9a96-1fe65be5ea60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac4d9a4-a2e9-47f1-9b86-86a880c93c96", "sighting_of_ref": "indicator--617eb0d9-e06a-490c-9296-159ff259cea4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cef660-9df0-4c09-86c4-0935eea7999b", "sighting_of_ref": "indicator--d92c5009-d9de-4269-82af-356f35d008db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26986a9b-2ad0-4717-9aaf-0cf6b438f012", "sighting_of_ref": "indicator--0c0bbc7d-83b7-43ac-8108-d4aaf96a7d88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72195a55-839c-4124-ab2d-610657e54537", "sighting_of_ref": "indicator--84095b8e-21f5-4b7e-a5a9-0d9ecc438e47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eade46-9bd7-4153-9bea-ae591b9a3a64", "sighting_of_ref": "indicator--fef1db3f-ee52-4b03-8a4f-371f630d6707", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f570ce-7248-4d44-a528-f403accaab77", "sighting_of_ref": "indicator--743c8f0c-04a3-4058-8972-db7c7335cb59", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3375e3-745f-480b-ada1-a7030d06f69a", "sighting_of_ref": "indicator--81de9ca9-130f-4b19-a23c-49508df0d5c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220a11e6-6a0e-4088-9957-f22f4eb4fa3b", "sighting_of_ref": "indicator--3ef6b0eb-f87a-4c6f-bc06-c5af19c027dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f65efa-49be-4ef3-94b0-2131d1426c98", "sighting_of_ref": "indicator--5dfb3439-65c2-493e-9151-098b2a6396de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84c885a-a680-4c2a-8337-0046fc5e170d", "sighting_of_ref": "indicator--d9d08a7f-775a-44a5-9a8a-19a578102835", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ce01df-5e5c-454d-b289-f827b839fd47", "sighting_of_ref": "indicator--19231990-ad74-4972-9380-bf017503a9c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795be884-79d0-4d62-94e2-4bf55ce2c097", "sighting_of_ref": "indicator--7e0ec082-626e-47dc-a26f-0e33b8a61044", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf204d82-69f8-4930-8cfa-c83596dd6f4f", "sighting_of_ref": "indicator--658d8a91-655c-485e-9e59-6cf00d335aaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8433c9d8-21eb-4e98-9b89-f293bbd95cb1", "sighting_of_ref": "indicator--8571d21d-969d-4a02-89f4-03dd56a17e88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98617b5d-aa94-4cfe-b7a6-8ec1980463b0", "sighting_of_ref": "indicator--44ec448f-432b-4e23-8a05-d6e6e93a4163", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19d2a21-f28a-421c-93e9-efbb26332526", "sighting_of_ref": "indicator--ff056a7b-7269-4387-884e-1b38fb83f9bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d91b3-77f8-4f56-a1ed-242c214ae739", "sighting_of_ref": "indicator--34bba0e2-62aa-41ca-a610-181cd735dfc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceb1a97-72ff-458a-b116-ca732186c357", "sighting_of_ref": "indicator--f96dba1d-be4f-4d99-b9c4-a55734f7b7e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e965a7-0211-4996-ad88-a8c9fd6b7f54", "sighting_of_ref": "indicator--47e86095-6aba-42bf-9b2f-e6457de36546", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd837936-4c9f-46f3-92a8-a8cded26f93d", "sighting_of_ref": "indicator--29e082e6-86f7-4642-92e5-b7c4c5dcee31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f670144f-afe7-4d05-ad19-7fcceb8caaf5", "sighting_of_ref": "indicator--2dbc38e7-f006-4a74-9da4-6bda74011d43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858589a3-9d0c-403d-9afa-ee2bf9e858b2", "sighting_of_ref": "indicator--60f843b4-4d7c-42cf-9665-885dcbfdf895", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8baf502-deb3-44f8-bd82-47d14959a891", "sighting_of_ref": "indicator--0d19f3da-46be-48b0-a5aa-8025f4373937", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c594583-f16a-4b29-b80b-c20f0f9b4d2c", "sighting_of_ref": "indicator--0cc430fb-fe7f-422e-b86a-7fe8d196cbe0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae365ba7-5ce7-4db6-9c48-c9fccd184f34", "sighting_of_ref": "indicator--856a83f8-8c86-4446-86b2-5097b238bec7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08091d5-2176-4379-b225-e7209a766349", "sighting_of_ref": "indicator--7aae4851-b055-483a-8fbf-8b6fce689359", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dfdf0b-431b-4cf3-8362-f750d30354ee", "sighting_of_ref": "indicator--22044542-509d-4060-8fe1-b2fe1afe4454", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68fa96a-45f1-4016-927c-54c96833d619", "sighting_of_ref": "indicator--f315676e-ff82-4efe-917c-aa1a639d337e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e816d351-e207-4a34-8ffe-0e5a46538251", "sighting_of_ref": "indicator--fff1353b-40fd-44cd-9f07-cf61643a6f77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e159f6d8-4f24-4d21-b38d-307b45559c57", "sighting_of_ref": "indicator--33ded220-a1d1-42d0-8517-48ad88df4062", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b82d3b-9453-4792-9a74-bbf4e35b6f31", "sighting_of_ref": "indicator--18269b2c-fe92-4b69-9f7b-1f0851d5f4fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee01be6-1842-4892-9b0f-c0f1c565407b", "sighting_of_ref": "indicator--bdd86e14-785e-4274-b49b-ad56575e966d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe0f809-e091-4ba3-b560-cbb50cf7f235", "sighting_of_ref": "indicator--d3b030cd-ac63-43f2-8f45-c52683b7b328", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d832c15c-59c7-40d1-b632-73756e72b728", "sighting_of_ref": "indicator--eebfd83f-5755-4594-844f-06b64514e883", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1facb6-7432-49a4-a1ca-e33ec62ae0eb", "sighting_of_ref": "indicator--d12e1aa7-1cca-46e8-9ccd-a1ce274f04a5", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43129d8d-74be-4eaf-bc4a-76401ecc3517", "sighting_of_ref": "indicator--25e08ce2-89a6-4497-83d9-ac7c89cfefc2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b13aac6-c623-40e4-9bfa-9cee9322122e", "sighting_of_ref": "indicator--7c8a4343-f22a-41c8-afbb-08a673a0fbdd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bfbdb9-7113-404e-b5c7-a66fb5acbcd0", "sighting_of_ref": "indicator--57e6efb2-24c8-417d-bd91-537253e5c2ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a03448-d211-4ca9-afd2-424fdc7907b6", "sighting_of_ref": "indicator--2d130fc4-29b7-4fcd-9527-f91bff5f1210", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea53887-f80e-434d-8599-fbbb1cee8fc2", "sighting_of_ref": "indicator--bda4f92d-ac4a-441f-9d63-045e8c83eb7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0248b6-b5f5-40fa-966e-8518f5e6c6ed", "sighting_of_ref": "indicator--561ae943-6954-452c-a846-b763b52d7591", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbf240f-c423-48af-aeca-27ec3974f28a", "sighting_of_ref": "indicator--40a5a66f-ade8-4484-a1e5-b753e927d9d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f442bf-c103-4314-9134-9409e5aef1c1", "sighting_of_ref": "indicator--a6fb9bec-f1f3-46b8-a3af-d6113190adef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c1642-04d9-49d6-b24f-3a10a0fb9f8c", "sighting_of_ref": "indicator--17ad0fe9-7d99-4fc6-a29f-f2decca70a2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b42176-d994-4f60-bd2f-0d1ebf271d03", "sighting_of_ref": "indicator--92943b67-ec39-4cb5-a93e-dc7f5d229c36", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b6437a-ce54-481e-9031-b6a755f91779", "sighting_of_ref": "indicator--46da30a1-19fc-4143-ab90-10d292769496", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b419f60e-ab5c-42d5-8a43-ce59546fcd0e", "sighting_of_ref": "indicator--5827ba5a-42e8-4eeb-bedd-b7c4553f20bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf5a075-7e39-4b92-82fb-f063136831c0", "sighting_of_ref": "indicator--3396daed-d05e-4842-9169-717173a57d55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7d4b36-a507-4f50-b4fc-53847188e8d1", "sighting_of_ref": "indicator--5e1dec0e-9fab-4e34-83c4-415e603fa11f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a83f4a2-1eda-4e85-a0d1-fbf07144a4ae", "sighting_of_ref": "indicator--ff0616a6-d423-48ef-a0f4-b25584d5a62f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94ea54b-e118-4b9b-83c6-c49e2152e3d3", "sighting_of_ref": "indicator--b65b06af-3f36-44ec-9da9-19307f57bda3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bb7fe0-be0c-452b-8705-0bff2aabdb6f", "sighting_of_ref": "indicator--fe27e973-002b-477e-b834-42fa761356d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0567ed6e-2cf3-4d98-90f0-5d5f4e18da38", "sighting_of_ref": "indicator--11bf839e-d3b9-49f4-8559-97191924323a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf759f0-01fd-4315-803c-a880d34246c2", "sighting_of_ref": "indicator--0c98be68-e717-410e-aec0-5920dad5cfa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0144f23-ed3a-4fe8-bc17-aacd4660e740", "sighting_of_ref": "indicator--94dbaafd-5701-4917-9b52-46f8a20d45ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c3b62-5581-4344-8abe-83b5acc9f820", "sighting_of_ref": "indicator--4ab962ac-5542-46d3-817c-bd958f91f2e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306d746a-3dbc-4932-b9f0-eb5763365a74", "sighting_of_ref": "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cd73ea-3eb0-404a-9d5a-fa8d8192e5a1", "sighting_of_ref": "indicator--b06f872e-d800-46d5-aebd-fb3d4d741b1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe455c6-8ef4-42fa-a6eb-2beebf0c321f", "sighting_of_ref": "indicator--bc8fb330-eca9-42db-ac84-4dd1c7185470", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60945545-3365-44c2-9c08-7cf10e88e839", "sighting_of_ref": "indicator--a3dc4136-2ba3-4fc7-b99e-e41327adffb7", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e709d972-4444-4fe1-b59e-2142746fc011", "sighting_of_ref": "indicator--c00a7366-7072-453d-92f6-941d263379af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81f52c1-7605-43e9-9fa7-911f20ab995a", "sighting_of_ref": "indicator--ab6f2c12-0dd5-4f24-a073-a71a7f82003e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b63458-014c-4016-81e7-7b2cc6c69c0a", "sighting_of_ref": "indicator--3fc2e7e2-491b-4d46-9726-86737b9879d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5850c1e7-9e5b-4a06-a075-79883d96a357", "sighting_of_ref": "indicator--5aa976db-d59e-43eb-ba7f-dae9abf1711d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d403080-f172-4dd5-a661-21d064306ccb", "sighting_of_ref": "indicator--3e6db069-dd12-4604-91a4-40cc8fce60c8", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e916fc10-881f-4083-9556-f867740b48d2", "sighting_of_ref": "indicator--0edb0a2f-0e49-454b-a897-14e06680b552", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a05eb1-5ab8-4c15-b25f-e166a4f84247", "sighting_of_ref": "indicator--c86fde72-e157-43ff-bde2-fb5b9825745a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b6d140-e29c-44e4-87ba-16e987e4b75b", "sighting_of_ref": "indicator--1305eefe-8c58-45f4-af0e-a7020bc58a5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8264ee-df54-4f33-8914-0797ed285a30", "sighting_of_ref": "indicator--b3e05f17-041c-44b6-b6ec-fcd249ec068d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57aff90-af05-4a40-a67e-ff8f78699d30", "sighting_of_ref": "indicator--2e33973f-9a80-4527-add6-94ba715eb114", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c961ebc-6678-4e45-9341-54bbea6f4048", "sighting_of_ref": "indicator--a4458460-58c0-4b22-a14c-de55defd393b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998dbefe-3c14-4eb0-b03f-6742a1d021ea", "sighting_of_ref": "indicator--d9593186-c4e0-445c-857e-88d4f99f2f87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749f95bf-84b5-450f-b219-4d98dfbbff45", "sighting_of_ref": "indicator--3783f155-1375-41e8-8e3d-d62d414194f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f08b3d-b7a4-43dd-b543-6bb5d2a5bfcd", "sighting_of_ref": "indicator--8de563e2-99cd-4b08-97f4-0c2f37e5ee42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261dc9a2-c25f-40e3-b3c0-46604a65bec0", "sighting_of_ref": "indicator--cdf5a951-4e53-4977-ae30-90909a88f0a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1204fa-e240-4a8f-ae3c-2a40f1074d5f", "sighting_of_ref": "indicator--60280db9-8bce-4e79-a506-298c08d6213f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e20dd4-5b92-4135-a753-f0c4d92b50f8", "sighting_of_ref": "indicator--600b7434-88a7-4018-9fa4-81095e0a8974", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fa27a0-e54b-4ab7-b2ae-abbd7f1769aa", "sighting_of_ref": "indicator--618cbc18-a1f1-4562-9d1d-9a7fa6c6244e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072c7628-d1c5-43e7-b2e7-b29e4f99096d", "sighting_of_ref": "indicator--8dc26be9-0b10-4293-9c85-a5ad05728edc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc45cdf2-acbb-4c06-9e04-9e62219787dd", "sighting_of_ref": "indicator--da9d7dfe-c522-4f1a-baa2-a988a507ea34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fcd03a-566a-4fcb-988a-a2e607d10cad", "sighting_of_ref": "indicator--8036b0b3-23b7-4c92-907e-f06141219e83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8abadcb-34b6-4b79-b2d0-af064381fb7a", "sighting_of_ref": "indicator--ddeb5831-243e-4c95-9b98-23f70882ffce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46da958-2d2f-43f8-9209-a340dbfe75ba", "sighting_of_ref": "indicator--537f2ffd-4cf2-4aa2-94c3-f555eca03d16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f56fb2-f645-4c0c-9381-a5236de09425", "sighting_of_ref": "indicator--fcd27130-e7c0-40dc-8101-a7e81b42466c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ddeb81-2a5a-43c5-b4e5-7f3f5be2c17d", "sighting_of_ref": "indicator--f3e5e2cb-8a15-4ebe-abbb-db6f70f94503", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b1c7a-6d2d-47f0-9688-49a1f52a8908", "sighting_of_ref": "indicator--bc982258-a08e-49cf-882f-403dc8884e80", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc56e74-ccd0-440a-90be-b147898fdf8b", "sighting_of_ref": "indicator--5d762387-12c1-4ccf-a4de-03371b94c75c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0738eee0-2083-4734-a00d-7fec5c0e8284", "sighting_of_ref": "indicator--38d9ae1c-1881-48e5-8eec-9311fa033008", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f27ffe-0ffb-476b-bdd5-a5b5fb26d467", "sighting_of_ref": "indicator--d2444b88-dd12-417d-8fc7-0a366c4e1e22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238e2bb5-5bc2-438b-9fcf-a2002d5d57d2", "sighting_of_ref": "indicator--6a8b2fd9-af15-4825-8c65-d7d3411698c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1651a-d2a1-4442-92a6-83628bc19954", "sighting_of_ref": "indicator--253913a0-1a43-4c7c-97d1-6ea692f86527", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2c4c01-74d4-4810-ae37-66a912d2f961", "sighting_of_ref": "indicator--016f8009-49bd-49cc-920c-b133ddb74126", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514f7fed-b584-46fe-9b78-40bdd0b4f2ca", "sighting_of_ref": "indicator--9632c4d5-4a23-44c2-8b12-1aa7ca823c6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a6282f-086d-4b75-aadd-c8e80413c136", "sighting_of_ref": "indicator--fd65fb90-12c5-4ccd-af3f-9da107718ddb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62e4128-2378-448a-81cd-cb89498498d1", "sighting_of_ref": "indicator--34221800-d00f-4f11-8020-fa44ff3ed03d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65558149-1ba4-42ab-8585-8078fa145a15", "sighting_of_ref": "indicator--0562ac83-d14e-4a7a-9aa0-2926c993e796", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1f0632-9943-4a8f-a771-44412bcce3cc", "sighting_of_ref": "indicator--7156fb4d-9ee1-4944-985f-b99f15d9c01f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df46aec-1a83-4994-97d6-362201d88c7b", "sighting_of_ref": "indicator--000f7001-725b-475f-9faa-4e006f7e9c16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af27298a-5a52-4747-b9ea-b6844e3a92e6", "sighting_of_ref": "indicator--03288e60-11a4-4f33-888f-3582d5ce8970", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f591e888-2c0b-43c6-b23a-d2dec605310d", "sighting_of_ref": "indicator--08d675b1-332a-4138-b8a9-e074d88608bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708fb214-8348-4afb-9026-b4ab0b51f2d6", "sighting_of_ref": "indicator--d4f37cc3-da4b-4812-b0e0-f01a5c98531e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81033782-f4db-42bf-beec-21b0bdf3cc4e", "sighting_of_ref": "indicator--97060cf1-89d1-4cec-aeba-8900e1027c89", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6110db43-f5a4-4d39-9f13-8a0737f2c6a9", "sighting_of_ref": "indicator--0d117b7e-d539-46b8-ba2f-71bc92302714", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c7390f-80bb-4e14-bf1c-8103beae4bb5", "sighting_of_ref": "indicator--4d7e024a-75a3-4863-b70e-4de8179bb21b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f605cc4-420b-4e29-822e-2c6033577fa7", "sighting_of_ref": "indicator--eb6a2dca-b492-44df-ba9c-2701e7412ff9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959b7895-994e-4acb-afe6-b25fe69ad37f", "sighting_of_ref": "indicator--4107d7bd-559c-4842-b628-3fa1d32a4af2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf187b6f-7a4d-4504-908d-c5ecb51f3717", "sighting_of_ref": "indicator--8a11509c-1d62-433d-94ff-40382c202e9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e97acbb-d21f-4bab-a54e-81ffb7d4d8be", "sighting_of_ref": "indicator--38af9008-e448-49d2-9985-cfcd643ac473", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbff92c-592d-442f-a777-c8399d312dd8", "sighting_of_ref": "indicator--d4faad2e-7a6a-4e0c-9ace-6ebc54dd8700", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a228ad6-709d-42f2-a09b-1483e62da3d5", "sighting_of_ref": "indicator--2b92853b-d9fa-4686-9852-f30616d9c624", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e932d2-2b3c-445e-bb00-7126641bb5fb", "sighting_of_ref": "indicator--338af4aa-c9ac-4695-b761-623e786c7103", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a142bfc-acc4-4d15-941e-12eb28922723", "sighting_of_ref": "indicator--58da16b6-43b0-4569-b053-5387678ff80b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434e03e4-6c7c-4a0c-b4ab-26b7b749c227", "sighting_of_ref": "indicator--ff46d9ac-6d57-4bf2-a72e-0e2e3012fa00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77db4111-d304-4739-b649-65ee354c6020", "sighting_of_ref": "indicator--89e58f08-6d7f-4746-8688-c177d139c2b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dafdda8-ca3a-493e-b9a6-a1b56c3f2cf7", "sighting_of_ref": "indicator--f871207a-4f5a-4e49-aad7-abdbb0db42e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d59e805-2dc1-4c10-a578-fc39bd05412c", "sighting_of_ref": "indicator--ff45aa9c-008d-40fe-9a18-86cf15b653fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54c12ef-ae0b-4ebf-9d1f-3a8523bd5f66", "sighting_of_ref": "indicator--ac480df2-4288-46b3-a56e-66e91220c066", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fd917a-8da4-4ff4-b345-00af592be8aa", "sighting_of_ref": "indicator--037245e3-94e1-4b39-8e63-e5f70f6a9669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b9fcb6-0246-4e6f-98b3-0f6ed0db437e", "sighting_of_ref": "indicator--8998ade2-d87c-49bd-9bff-62b180338fbb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc490be-17f2-479b-ad9c-330bb68eb974", "sighting_of_ref": "indicator--7fd688f3-4553-452b-bd8e-817d1321584d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b04dd0-5ce7-4414-b740-3ecf2efd80de", "sighting_of_ref": "indicator--deedfeed-a9b4-4106-8dd5-f4e83d6dc53d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3972b5-774d-4108-a2b1-57e2015b4f39", "sighting_of_ref": "indicator--761a3a94-6dae-4780-97a4-f2df02e4629a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437d9f3e-7f26-4a7d-8b5e-50a1470dfe6f", "sighting_of_ref": "indicator--11e3838a-3fbb-4a10-a85d-092f1920a671", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9bc0f6-2f13-4318-a566-ac28bda331c3", "sighting_of_ref": "indicator--482e0822-1091-46aa-a5ce-04538a39b8b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9262ba9b-7f4a-4f2a-bba2-f22a59bd13d4", "sighting_of_ref": "indicator--74af2aea-9596-485b-9dc6-790fbe3e057f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d120cf-504e-4f53-9504-ca040f6bf559", "sighting_of_ref": "indicator--6669d23f-b48c-43fd-8ae0-138113284c50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891aeeaa-5e4b-49a1-9c77-0f5433c4a139", "sighting_of_ref": "indicator--aec8bade-a742-4b23-ab42-057b8500f8e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604c8ec6-817c-4597-8c79-380250a524f1", "sighting_of_ref": "indicator--d6305c61-750c-47e1-894d-f2418d5bc9e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26be18df-8f8a-4346-9150-d2a86298eafa", "sighting_of_ref": "indicator--e8e7edd1-5cfe-407c-b74a-233992f2982a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f7e1f4-5fe0-4594-ab82-e3f28353614c", "sighting_of_ref": "indicator--76354ba1-a914-41d0-9277-8ef360ac33df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd66560-8ac9-45e4-b057-1466ff62151b", "sighting_of_ref": "indicator--a4a04206-617e-4a99-9470-7fcac0cb5ed9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8136758-c12e-4373-b19f-1086c57f27e7", "sighting_of_ref": "indicator--051654bd-4738-4fa7-9ebf-cff530f4ba81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abe60eb-9b0d-4784-b99e-a23797e2426b", "sighting_of_ref": "indicator--1ce6bfed-960d-4ccd-8db8-432ce11b4a88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00947321-56ea-40ff-92e6-67b6dbb53e46", "sighting_of_ref": "indicator--afd018d5-4470-41ed-a7b7-36ed1a1f19f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d631d76c-a9d6-4193-9a9f-f474e728c2e9", "sighting_of_ref": "indicator--1fbbd110-8892-459d-aa72-53440e379815", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9c3d5-1fd0-4ced-9b83-4eaa76ae65e7", "sighting_of_ref": "indicator--8d5a2e24-a0eb-4249-9221-bb6ae09517ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f63763b-6bf8-472f-bd16-df57c85d09cc", "sighting_of_ref": "indicator--ced4386b-88ea-47bd-b17f-d83a097b6fbd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada67d13-b437-431d-9527-c8461b7894c4", "sighting_of_ref": "indicator--c8837bd5-945d-4ca9-8f96-5bf7b1c2985e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e351bb6-4590-4dcb-880a-3f1cf7f8ee26", "sighting_of_ref": "indicator--0aa07f60-66ab-4da5-9a9e-a8583800ca35", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b83fb94-d68c-44e6-82f0-34b0e7869d39", "sighting_of_ref": "indicator--382207cb-b335-44ce-8a29-39621ce277b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edef9178-07a4-457b-8577-bdf572e7542c", "sighting_of_ref": "indicator--af74803e-aa4c-47bc-b60b-d561f584f167", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b411a080-f47b-4aa4-a77d-2800f230da6a", "sighting_of_ref": "indicator--aa5cc406-fda2-4d81-b535-03fc15f98ea0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf62a85-01cf-49fd-ba5e-cf15860083a2", "sighting_of_ref": "indicator--8ecbf2df-6126-40ea-a0ba-1c8308cda925", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11f04a4-d25f-4b2e-b3c4-f3a1767c6084", "sighting_of_ref": "indicator--fcdaba89-f59e-420f-b2a7-6697af9dd7e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0534dc34-3a36-403f-a460-46aa1a110439", "sighting_of_ref": "indicator--03adbd2f-8afd-4474-adb1-e8cded83d2f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e96dd03-464e-4a0f-af06-3e5a01b21ce8", "sighting_of_ref": "indicator--7bba8b0f-04ab-41e5-887c-316291d17e9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3b6569-ecd3-4d20-98cb-e6d59f130de2", "sighting_of_ref": "indicator--9f5987d0-0849-4876-8a5c-2cd1aedde0f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cf17db-c8cc-4d5a-a87c-bdf6ab619f4a", "sighting_of_ref": "indicator--377f754d-030c-4b6e-a207-e16fcf6df304", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6493bd6b-f5fb-4066-8d67-f01888529b59", "sighting_of_ref": "indicator--9ee9df60-188e-45a6-a402-a055bd7270d7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab751f39-f29c-45ea-af47-015d8a771d70", "sighting_of_ref": "indicator--1c0fe101-6bdf-47a4-b4e3-a0526a941f0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e35217-00cc-41ee-a83a-feeff8962d87", "sighting_of_ref": "indicator--4b943fd1-ea46-4d29-8641-b1bae5d9f66e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce72964-2aa2-47cb-a4e5-4230ddeb5b61", "sighting_of_ref": "indicator--a7158eba-e4dd-4d81-acbe-62709c8b41b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddb20a3-2d5a-49e3-aaf5-0a1832cd6bf9", "sighting_of_ref": "indicator--64f2ff8a-e691-4486-982f-2ff254613f5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a51ffa2-79ac-4da9-bc35-1cfc0e09cf34", "sighting_of_ref": "indicator--068c1c19-c09e-4966-9027-6e6508c94250", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b1a230-a4b0-4084-84d4-1654fea0a9ec", "sighting_of_ref": "indicator--f9c60ae9-0613-4097-99fd-7097b4045d54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc94f0e-13c2-49cd-8d25-78c45c4ba88b", "sighting_of_ref": "indicator--7d86260d-243e-4240-b927-011c1c2e4b13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c24155-4eda-4fdb-9d6b-a2aef95ab264", "sighting_of_ref": "indicator--eef5e6f2-5809-4412-8fde-5b73c9a46431", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c87e7d6-2a1a-4a00-8f71-106fdf204991", "sighting_of_ref": "indicator--d401a401-d996-4d1b-9135-28a1c8c5877f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f788cbdd-700a-4dc1-a728-08fa3089b3b8", "sighting_of_ref": "indicator--1d7fb069-3235-4a47-9e87-55ebd5dd1e3e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b7c195-24a5-42f9-812f-8f176389a964", "sighting_of_ref": "indicator--3f8571ab-abb7-4b3b-82c7-c872637fb2a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f24a63-c355-4381-8918-e5eefe781e9c", "sighting_of_ref": "indicator--78fa4960-ea0d-4a7b-9af9-9c35b2033d42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2931c1df-6200-43f5-9742-8f02479ad6b1", "sighting_of_ref": "indicator--93d46e92-dbf9-4bcd-8a1b-97f61405bfbe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea21bc6-2cb9-4e95-a4c9-d56fd6a46957", "sighting_of_ref": "indicator--0ab459a5-01bb-4593-8504-e2dce7b78604", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2938cd69-f7fb-4c94-9a51-d12a9e2b2a22", "sighting_of_ref": "indicator--6c824978-b53d-4911-b12e-a838bbb9962f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5d198e-074c-4a46-879f-0ef594857873", "sighting_of_ref": "indicator--a8a70c05-3b0d-453d-bf99-b2ec41f9e314", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef2ffc3-9277-457a-bb35-0b9c6592a889", "sighting_of_ref": "indicator--110dc194-ae68-4b79-8a2d-d944424ce1f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da6ff6b-3935-4235-933c-5e9aeaf22714", "sighting_of_ref": "indicator--1ab28ecc-36ad-4d9d-b40e-d0539625f47d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4befe3-9930-436a-b4d1-522174058b0b", "sighting_of_ref": "indicator--7e1c9ebf-efa6-4c15-a727-1ac766079342", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db8aa1a-604c-463f-8ad1-0c0d4ddecb2b", "sighting_of_ref": "indicator--6718ba92-7509-4cc4-86fa-16fcaf396cec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1048472b-04f2-49aa-9c72-c990f8e522a1", "sighting_of_ref": "indicator--785de4c8-e4b4-40c4-a212-571321ec6847", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3810ba-6a1e-4fd7-967b-3eeb2720a193", "sighting_of_ref": "indicator--fe0469f6-87b9-4667-9a85-4e8cf917f37b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e957f91-c1a3-4e60-9a06-50d9c12fc39f", "sighting_of_ref": "indicator--9585bbf1-2fae-430b-bd76-009d39a1cba9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa28b25-5c54-46db-989c-c83ad19fccd3", "sighting_of_ref": "indicator--0557b0e1-ba04-4e29-b4f1-5e4f9bc2f4b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad93721-241b-4e60-a8f0-8c16cfa76ee0", "sighting_of_ref": "indicator--4735a35f-5c41-46cd-b4dd-ea1d0e538799", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19739a59-16ef-4aa7-ba87-0162225d9bd7", "sighting_of_ref": "indicator--8c81210d-e163-44bb-9416-749499d9bf0a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bd5a88-3142-486a-8abe-f921f992c0c2", "sighting_of_ref": "indicator--e01d5546-46e3-44e9-b7bf-a377f3d936b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a765af1b-b047-482a-8577-316434332d64", "sighting_of_ref": "indicator--be83733e-9a43-4941-a319-fa5731556f93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d484f7af-2442-4ef3-ac14-f12f33cf1576", "sighting_of_ref": "indicator--2ba5e68f-1514-4e1d-9d24-9975c88cc522", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62526ae-4f8a-415a-bada-cfa5e55afc80", "sighting_of_ref": "indicator--f682a928-a712-4675-9023-65e35b6d1fb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e494cbf-9fa0-4f15-82b1-b12edcc83fda", "sighting_of_ref": "indicator--0da935ec-8c2b-4543-8fcd-195e6a63a0f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d25a031-88fa-4cd8-b8a3-d71942db0742", "sighting_of_ref": "indicator--b31c55f1-fcc6-43e2-9ba9-ed91132b409a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26951573-7103-48c8-abe0-5d0f41e88822", "sighting_of_ref": "indicator--ee018345-e675-4e7f-ad8d-00bf5de6a818", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8409413-fe2a-40c5-8226-82129fd702e2", "sighting_of_ref": "indicator--50797778-bb82-40fe-bfcc-a493693f2a02", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d6a907-b335-4015-9b6d-709c8cfe2dd0", "sighting_of_ref": "indicator--d7c254e3-ed2f-4ef3-abdc-35cfe7637767", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654eff11-de2b-4e3c-8ad6-530e225a0215", "sighting_of_ref": "indicator--f186d85d-faf0-498b-b9f0-5602c0d24646", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb87dde-aaf4-445e-aa29-78a9d28575ba", "sighting_of_ref": "indicator--6fe904fa-4234-4f1d-8548-6859ce2cac5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91198ac8-914a-4501-b22e-3d41ef272478", "sighting_of_ref": "indicator--d4d05e7a-e48c-4f02-a999-5dbd39fcbf62", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7235a5c-fde0-4ac7-8d0f-f014fab32e1f", "sighting_of_ref": "indicator--78562a6e-ffd3-4cd8-8b08-0db782ab5d78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072cc77c-fa37-48eb-aa91-f327c76e9a5e", "sighting_of_ref": "indicator--4666c629-c982-4ea9-9235-392136015260", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6874a8-d9bd-4be4-9002-8f2fa5c412ad", "sighting_of_ref": "indicator--ecaa1202-fd6e-49e5-aedd-6adf6d05cfb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76479c3d-8b6b-44fc-92cc-7c89d6e23aa6", "sighting_of_ref": "indicator--99097647-5c3c-44eb-bd09-c9148e82e169", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ea6dd7-f644-4d02-a083-95e067e30b20", "sighting_of_ref": "indicator--94fba2f1-e900-4bb9-a6cb-b6d7dbf8540a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c5a2a9-cd1f-4410-bc66-4edbfbb3ed65", "sighting_of_ref": "indicator--0b299b91-9a31-42dc-a442-6c93bf6c8eda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bded76-f9bf-42b5-aa71-034439d53a51", "sighting_of_ref": "indicator--028b21a1-6eaa-4571-8ff0-1a9c1949d068", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef44d09e-7a35-41a6-bec1-bb246e8f0131", "sighting_of_ref": "indicator--98cd7071-0c0a-4403-a3b3-dfe34a8a8df4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4ffd5d-8b6b-4df2-abff-2285893ee1f6", "sighting_of_ref": "indicator--94a1a77b-9234-486e-96ed-37bfe3d87f6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e1b0d8-ec20-488b-9407-738b58e09d9d", "sighting_of_ref": "indicator--ff0e8131-bc88-45a5-816e-95bd103cb38b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a1038b-8a63-4a64-b088-f5873b41d594", "sighting_of_ref": "indicator--7dc4785c-17e6-4a5a-9eb3-cbace8d314ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78776254-4a10-4592-83b5-bb9be3eeffe3", "sighting_of_ref": "indicator--a236d7dd-51fd-43a7-8217-3be7741e26cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea2f3a2-8e55-4dfd-848b-c48a39f3e1a8", "sighting_of_ref": "indicator--f880ec67-d51c-449b-b7f2-d5e20d30c83d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e36da3-eee6-49ee-b4d4-3dcae7a744e2", "sighting_of_ref": "indicator--37c4aa6d-dfdc-47f6-985d-a62505bf683d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4a0bf4-f64d-41f2-8569-be564e12ecf3", "sighting_of_ref": "indicator--ff20fbcc-3d50-46d7-a708-542a2a089ced", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f18ffeb-28e2-4b47-b54e-c147e4935c89", "sighting_of_ref": "indicator--6793f455-95df-4fcc-a60a-b5e31748f53b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ef701a-8edd-4817-b9aa-ae80d3080bea", "sighting_of_ref": "indicator--6539fed7-2fae-481d-801b-0adf367926df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db3a08c-0256-4dbb-bb21-adac2bd20ae4", "sighting_of_ref": "indicator--0126e6db-3618-4f22-8d58-1acda69b8903", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded53144-6558-4c11-9244-a206fb54b69b", "sighting_of_ref": "indicator--85da1427-5c3d-4ba5-861a-6423fd1e8158", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed81132-15d1-4e28-9000-4f3ee5f36939", "sighting_of_ref": "indicator--34b5d595-9cf5-43cb-a63f-71aa624346bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5950637-c29d-466a-9103-ddbbbd680a0a", "sighting_of_ref": "indicator--fc8f8bde-5b26-4fbf-962f-6e7d563783d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1eb35-cd9a-4f75-bd73-f743fb5e671f", "sighting_of_ref": "indicator--cdfaa983-72a9-4c87-a513-3e2a4a2cc1cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2444f5dc-45c4-461b-953d-f92a7e164899", "sighting_of_ref": "indicator--1848a9a6-c489-4e2f-931b-90ce194e6881", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30f86f7-ff9e-4e1d-a85c-f4df37c5b46e", "sighting_of_ref": "indicator--28541b09-9ca4-48c5-8caf-b191fbbed18b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511ddae5-ae00-4420-8989-330354992575", "sighting_of_ref": "indicator--fe4ea54f-c5ce-45f2-a3f2-e914cfdfc0cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e51511-ea2d-48c5-ae94-d6c5a84ef671", "sighting_of_ref": "indicator--75b4b62f-1481-4dd9-b741-2cd48096696b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecaa44d-9517-4988-896d-083cdc1e53cd", "sighting_of_ref": "indicator--268f3090-bea9-488f-b793-1d5193418cd3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be9722-dbe8-4b9b-9a3d-792d75b6a70c", "sighting_of_ref": "indicator--24698bd6-01c1-415d-a341-acbd62bd46db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891dc130-7904-4f12-8a8e-6a62d38dceef", "sighting_of_ref": "indicator--cd46348e-fb18-4735-a9be-9ac160339c2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad66010-fc8c-4873-bb96-3d5a62d4d0ac", "sighting_of_ref": "indicator--776e66d4-2727-4be0-82d2-a3a6bf26ddda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1be40-37f5-4257-b5dc-b4ec14c24f62", "sighting_of_ref": "indicator--6060a3c0-aa84-4b96-89a3-29b62bab597b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0880c3e5-d7a0-4bfd-ade5-00a68134333d", "sighting_of_ref": "indicator--f403ddb0-5f94-4fe7-805a-762fe53a4b66", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7f5410-e399-458e-8b2d-bccf5878d633", "sighting_of_ref": "indicator--c5c30a4c-fa15-4200-b6b7-6ab504f7fba6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabccdcb-a77a-469a-b225-fe79cea8832c", "sighting_of_ref": "indicator--42ecd550-14af-45e7-8fcb-1b5186e58a03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33d2bb0-d78f-41a4-8e6e-7688c420c69f", "sighting_of_ref": "indicator--ae669c7f-e3df-402f-939b-86a743f853f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3077845b-8cf9-4524-a1c1-ba94fc92d128", "sighting_of_ref": "indicator--712a6b34-6730-4945-86cb-a6bb496187cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f44a7-26d5-4255-824a-59ef5565cc04", "sighting_of_ref": "indicator--52c5216b-c5dc-4680-bc85-6a7f1c947b95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cb7453-ee84-498b-bf1e-6630cec7ad3c", "sighting_of_ref": "indicator--c4dde306-0790-44ca-b930-6c58a11dfef7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a067d0-940b-41d6-a35a-3c83e10c0d4b", "sighting_of_ref": "indicator--b45db110-5436-4082-9717-9560d2766293", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3b617e-1eff-4edb-bf3c-c9d78be52e40", "sighting_of_ref": "indicator--7522277b-f472-4e1b-848e-fd88a29acd29", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0928df45-f61a-4cfb-980b-13d082a44085", "sighting_of_ref": "indicator--be507373-7252-4319-8a7a-91ceaa3199a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc046c-d9a3-4257-8535-4e12a8cbe3ca", "sighting_of_ref": "indicator--acd60028-b87e-4b57-8d03-770d865d11ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4faa2d-4c46-4849-8e0c-98642dcf4b80", "sighting_of_ref": "indicator--730c08f2-6018-4897-b612-141b5dabd8b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ef770f-15fb-4828-9763-42fe37f71ebf", "sighting_of_ref": "indicator--98d3de86-8c18-4a7d-a938-4a93f02d8402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9e65c8-a607-40df-9aee-d4dce4f5b76f", "sighting_of_ref": "indicator--a20378dd-b3aa-4bab-8874-dd623546d513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d99bb9-0163-4ea9-a79f-2b0466b31175", "sighting_of_ref": "indicator--7a117959-82e0-4403-a50b-55e18ad2a3a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4802a561-adeb-4176-9aff-be1adc9dda95", "sighting_of_ref": "indicator--bc6ce070-48ee-44a0-88d6-3cb6b9a8052e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55812fb-f32c-4382-8b8d-e27da1611f88", "sighting_of_ref": "indicator--7750db82-eaa5-4b17-a86b-bb09db0ae67d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b448a98-bf04-4e86-b399-a4702b51d33e", "sighting_of_ref": "indicator--bf44e043-a705-46f8-93d1-b743f33bc574", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b6e239-9311-4057-8d89-78447d3c966d", "sighting_of_ref": "indicator--f2191810-a7fe-464c-a7ff-835f6f60db64", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acdfc26-e7b3-44d1-a191-0e79266c7202", "sighting_of_ref": "indicator--0fbff1a4-243f-4cae-b28a-af9b2766cd92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe80fe51-abe1-47cf-937a-1bad94d2b674", "sighting_of_ref": "indicator--50333e91-33dc-4e70-9811-de9b56bbc107", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29bbe25-f9c9-4079-9eed-e9f05c37b8ab", "sighting_of_ref": "indicator--d4d880bb-4316-4bad-8f30-8c287ec96d65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd7429d-e47d-4721-b497-0cbcfb810e19", "sighting_of_ref": "indicator--ddba6135-f940-46ce-b1f9-a32d52b68a37", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5a3628-4b75-440f-a22b-acf04163cb7f", "sighting_of_ref": "indicator--ba5aa485-9375-4cfa-813a-636f79e99ad4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4554621-4f3e-4759-a5cc-3c92f0cfbc23", "sighting_of_ref": "indicator--fc4831b8-c51d-4382-a88b-d233bd3f079f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507e5054-f9d1-4b75-b153-51a2db6e1670", "sighting_of_ref": "indicator--ea73227c-4e67-4da3-b4b0-820316d9413a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397e4771-65c6-417d-bddc-beea8b8e3835", "sighting_of_ref": "indicator--287881e6-3cad-43b6-ab17-630cbe3b2f6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64f94de-7507-4f83-b3f3-704d7380acf0", "sighting_of_ref": "indicator--697f590d-81ae-494d-88ba-843a086aa72f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae57993-396b-4fb3-8776-74f1fe293dbd", "sighting_of_ref": "indicator--994c73dd-0425-4a1e-879a-48de2c904794", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c74f3c-b9ad-49d8-b2e2-1d5f0be0c284", "sighting_of_ref": "indicator--73d384f0-9582-4a70-a568-56ccde5519f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5adcd-0726-4264-a0a3-90fbb88ed476", "sighting_of_ref": "indicator--ffdaa294-79de-4909-9277-65592975a94d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950e71ef-f442-4426-88bf-218d651fa492", "sighting_of_ref": "indicator--3fce7c46-6918-4313-a7d8-15ba21e3d178", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677f1abb-e89d-42f6-a901-53a9fa0332c0", "sighting_of_ref": "indicator--0fd31cc3-fa39-47e3-a2ff-cd3174c73116", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ec9c8b-990b-416e-a4f3-f4feb28a2410", "sighting_of_ref": "indicator--eda01275-5599-44dc-a7bc-a35b7f8647a5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abc73d9-a5d2-428a-b000-0aa5371a446b", "sighting_of_ref": "indicator--99945d0e-c66a-4b8a-9e36-2b8e7efecbf5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a3e233-53df-4281-9b76-9956c44ce389", "sighting_of_ref": "indicator--00c8a7d2-636b-4dbd-8bb5-87c4b2ec1e1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3cf941-72e9-4fef-af17-ea8d4c927cd4", "sighting_of_ref": "indicator--077fc4cd-9281-4219-840e-81ff182f8c7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322b20ca-0401-41fb-b52a-143677e55cb4", "sighting_of_ref": "indicator--3f1ace25-de98-4fdf-9540-27e1ab1bd6b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d1fdb8-1d35-4558-91cc-5a2ed8ef67ac", "sighting_of_ref": "indicator--2c782408-07cb-42c7-9c41-ba7cc6b41401", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f393b0-9d9b-4376-909d-167f0c02794b", "sighting_of_ref": "indicator--c2558109-83f0-4df3-9339-c27d7ee916e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48444939-d76b-4f7a-8c41-5552b027a411", "sighting_of_ref": "indicator--31301c84-07a0-4129-8ad8-234a1a95673b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4cbabf-9d7b-4216-aeb7-cf666a241b46", "sighting_of_ref": "indicator--df0e793e-3185-4bbb-8493-22c690bcd318", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76baff51-1584-44e8-aa76-0576532eced7", "sighting_of_ref": "indicator--073e2e61-4e7b-4042-8457-0e7d4053afc2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d97188-a409-4937-b676-458d5f3183cb", "sighting_of_ref": "indicator--94a76c55-d734-45d3-ad6b-0e10a4a89b59", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04b48a1-90c4-474b-9f11-c8b3aa779305", "sighting_of_ref": "indicator--f42d087c-5421-4b00-91cc-677e237c3518", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54aa190-9019-415c-afe5-9074e9a91b0d", "sighting_of_ref": "indicator--22997bf5-ac80-4f1f-a0ac-0aa7326ef9b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef8544-5a82-48eb-ba2c-2057a62041e2", "sighting_of_ref": "indicator--05535c56-2199-4822-bfc7-a295bcc78af2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18ac946-60f7-41a2-9435-e2045d0110b3", "sighting_of_ref": "indicator--b8baf087-2a55-4ea1-9d92-3ef9321dace7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bf5d6f-6d6f-4211-8e1a-0eb467ab47a7", "sighting_of_ref": "indicator--b051a6d6-47f1-4c30-933e-a6f3401d6fa6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71637a05-1d42-45ec-9979-6b9aa67b4078", "sighting_of_ref": "indicator--4a354126-d8cf-41cf-a726-75bf8f14fdd0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8b6b75-8c04-41c3-817f-fd94d99f4afa", "sighting_of_ref": "indicator--1cf33e9e-37a6-4f40-b23e-d2a4252d6d06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0766abf-31ae-4d29-a8b9-6893e1d269a0", "sighting_of_ref": "indicator--6bf83f4f-8d43-4c39-9b01-2d5ec0f2891d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cae5d0-5683-4388-a3a9-ff8138f68942", "sighting_of_ref": "indicator--d489ef7f-6a07-4682-b3bb-81f0b746940e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fe18b4-2187-4527-9a1a-f0bf76355bff", "sighting_of_ref": "indicator--c411be37-b717-47d5-9d8a-24b3f12ff02f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458013cc-eecd-45eb-93bd-2f1cbb3d8c7a", "sighting_of_ref": "indicator--487dbe83-e376-4bfe-9abc-0aea871bec9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0711df-d36a-49fb-ab1a-267363a22125", "sighting_of_ref": "indicator--ddc2ebdd-aaaa-48d0-8516-47229fa84f56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf9ce61-37cd-4ed6-ab6e-e2e4ad9d1e2c", "sighting_of_ref": "indicator--ac014b18-bf16-4dc1-a342-e45e5465d507", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d9e05d-9346-4c73-a084-c01fbf378003", "sighting_of_ref": "indicator--9fb3ea86-fd6f-482b-b215-0a4592f82368", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf79cc40-bf2b-4cb9-95c3-161f3554149f", "sighting_of_ref": "indicator--f709179b-fa23-4ec9-9fb3-e0d3cbe14d0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e9ff86-907a-48a8-8c56-564b467bdc15", "sighting_of_ref": "indicator--1810c5b4-8303-4dc5-b2f4-b22ba153ab6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6327099-52a8-4a64-b230-73adaa36f392", "sighting_of_ref": "indicator--fb12d307-f778-4397-9a3f-e343ccc4b949", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9d9ba3-0f15-4c7f-a0a6-4cfe7a272a1b", "sighting_of_ref": "indicator--eda6504e-e3e8-4cb2-ad27-67b149a03c1b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19bd4bb-32a3-4bfa-9b5b-a719aadad5b5", "sighting_of_ref": "indicator--f801f0cb-3230-4baa-971b-28a291c44b45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4ceafc-992f-475e-bb1f-a978de8e3826", "sighting_of_ref": "indicator--22623622-d259-4bc7-990b-8c256f58cf17", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ec2955-2eed-4661-9713-25478bf0f0e7", "sighting_of_ref": "indicator--727b976a-14d1-4600-a08d-315c5a7bfda3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff20736-3b98-4ec6-8057-7624347777cd", "sighting_of_ref": "indicator--cbd5ba9f-2f4e-45b3-a136-3b0c83e927fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c2b35c-a0e3-45db-b70d-ff541b8632aa", "sighting_of_ref": "indicator--8a9d75e9-77fa-4567-a072-a55eb8604974", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2158e98-a63e-4e9f-8cdc-bdc76a3a5eab", "sighting_of_ref": "indicator--4fd31ae5-fcfe-46bf-8da5-ad7f4b2a0852", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40db1aa4-3eba-47dd-8687-64e23a7414b6", "sighting_of_ref": "indicator--8ed78dff-3868-4c26-9b40-c437625c089f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ab7bed-ba1d-4b63-8620-1a11d7e6889e", "sighting_of_ref": "indicator--6478029c-701f-429a-a0b9-986c147556cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd9b4ee-ac5e-44e6-a7f4-2c3f9af07e62", "sighting_of_ref": "indicator--5c9b012f-2e46-43b8-9d87-ed06eeebfa67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4dfb0f-75cf-442d-89da-62b1487f867d", "sighting_of_ref": "indicator--acf545ff-c708-4b6b-841d-8526afac8e85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f3f05f-a183-4f56-b75a-f99b7e34c6c1", "sighting_of_ref": "indicator--16d4cf21-5532-4610-8ad5-a80aba88e071", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82144db5-0849-4594-a7e6-d13d3e936d89", "sighting_of_ref": "indicator--40b4c1cb-30f2-4b42-b0e9-dcc4c1445919", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69d909b-f83a-4829-897e-da19bfae0a58", "sighting_of_ref": "indicator--b7652f31-f628-4ff7-97b7-2ddd467d7272", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d179005f-ffab-4f8f-8da8-b021f8451df6", "sighting_of_ref": "indicator--3104ecac-4da3-45e3-b863-492e0edac8ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8360a8-e5d0-45c7-bec6-54f96bae762d", "sighting_of_ref": "indicator--fd6abd24-c927-46c6-ac06-0766f2cca147", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491bd919-8f5c-44bc-a24b-62d21cc46cee", "sighting_of_ref": "indicator--d9ce4ebd-d2a9-48d9-8133-ca63f48138df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7f9669-79b6-4788-8b6d-ab821d385203", "sighting_of_ref": "indicator--c1db77ef-bd46-4a03-8913-499ac03ed189", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911f6e18-24d7-4ade-8161-81cbb6044eb7", "sighting_of_ref": "indicator--0ec831cc-f47e-4377-9ac6-f8064b20d94a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f40c83-db3e-4838-a747-097e18058b11", "sighting_of_ref": "indicator--1936c617-53ab-4f29-9536-4958f75b860c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7691ad6a-871b-4736-8ca0-b6f6e89dce67", "sighting_of_ref": "indicator--b761afa1-9182-4563-b232-05d98f29d221", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d8a43a-df25-4cac-a145-ca84e604317c", "sighting_of_ref": "indicator--29a8ad48-cb13-4552-88a1-9088ac515e14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f9d45-704a-48b9-bbab-bf0bbe04e89c", "sighting_of_ref": "indicator--f5656329-f394-4651-8bf0-4c131f829c88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae29ebb6-9829-4124-8482-9b50cbf724df", "sighting_of_ref": "indicator--55d556a5-682c-4357-918a-e254cd5171c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1350d2-f2cf-4723-ba6c-8b66c4c40fd7", "sighting_of_ref": "indicator--eafdd864-55c0-408e-a49a-7516f551211e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f564a60a-c881-462f-baae-6afeaeefa195", "sighting_of_ref": "indicator--8c174829-9c67-441f-ac64-ea860edd42a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7df8af5-2b85-41d5-b349-26ee6d434bd1", "sighting_of_ref": "indicator--416b227f-9da8-42ae-86a0-d60c7180ea0a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ded65fd-dce6-42b3-b977-c82058dec865", "sighting_of_ref": "indicator--ca6150b5-01f6-477f-b0b8-9ab9f7566a87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2559f24c-e6df-4b4b-9c06-2a92d061e182", "sighting_of_ref": "indicator--92516f82-9458-4c62-81a4-5347e8042fe3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65632616-44f5-4239-95f7-01d3b847c313", "sighting_of_ref": "indicator--633c4cf5-6966-456f-bc1e-c85347157092", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78cf166-20a5-4ac8-a985-bed38abef4f5", "sighting_of_ref": "indicator--90031515-6d6a-44e8-9ee5-b6d09e8539a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac231e7-56e3-455b-809f-60df031f3a8b", "sighting_of_ref": "indicator--6eae2ee5-9d1c-44a1-924e-2f29a463ccaa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d002a03-f20b-48ed-895b-76cece98134c", "sighting_of_ref": "indicator--eb6ec784-b0b7-4510-b596-214e1adf7b7a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abf08ad-fcac-4b3f-9b23-cc412fa65619", "sighting_of_ref": "indicator--290769fa-b7dd-4aea-a113-ae062330db35", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea61b7a4-99ff-4bd1-bda1-0e50c8e93b8b", "sighting_of_ref": "indicator--91f8bddb-4b6f-4c3b-81c6-c5b03fc732a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4fbe20-9c54-43b5-9af4-4bb84ede1175", "sighting_of_ref": "indicator--610cbccd-a539-45bd-ba60-7dd7ae82ae46", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05978d26-b269-4862-8a28-59d6ed1ba558", "sighting_of_ref": "indicator--b5443980-223a-42d1-97f0-3e26a7adac4b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc764be-bf11-433f-993d-d42cab6ba887", "sighting_of_ref": "indicator--7f1975c1-9952-490f-be21-10568d7cdb44", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4aced8-f4cc-4409-851f-ceff801c95a2", "sighting_of_ref": "indicator--8b711cd5-fe4d-4321-86ae-f6343f1c3483", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74f3d88-418e-44dd-9533-11c3ab06f9a1", "sighting_of_ref": "indicator--3f7217d8-0239-447e-8220-ff3515d33b8a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b7c2df-3d0a-432d-b2c2-c98434989afa", "sighting_of_ref": "indicator--42a00a35-6f62-4ea0-8e4c-57ff6af86c14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99f96c3-24ee-4c92-9185-0367b1fa0b5f", "sighting_of_ref": "indicator--2bb92b84-0fa2-4642-824b-f92c340d81a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d20a2c-4ccb-4551-b319-bd55f5b44e41", "sighting_of_ref": "indicator--e938a36a-cd71-4622-9311-0545c2594143", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf727e3-6a10-41e9-8ffa-f186e0ffb960", "sighting_of_ref": "indicator--8d220755-1bc6-4b23-a148-728782baa12f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b469ab4-7387-4709-8f64-b9d5e09c7a7c", "sighting_of_ref": "indicator--4cfd497f-9769-4864-aa38-334d089fe798", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b845ea97-70d9-4140-b5b0-e20e8a6943d8", "sighting_of_ref": "indicator--ce11e29b-f7e0-4026-b8ba-bf005935ce0a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68deb58-5f28-45b5-bd28-adcd143d6370", "sighting_of_ref": "indicator--2529eee0-a2ce-49a4-817b-4c2da84baaeb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99f0bd3-62e7-4adb-bc63-0e84e70e8207", "sighting_of_ref": "indicator--f25a6fba-3e08-4080-a3e6-bd7fcce40ca1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8143eb6-847c-449e-a909-338bc731d10e", "sighting_of_ref": "indicator--38cd577f-9008-4084-8e25-c5e5a1d2bad8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad42fe0-ab14-4e7f-8e42-2ac4ec44cf5c", "sighting_of_ref": "indicator--6ba227d9-3961-4996-8528-d168150542d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e829646-b2c4-4a64-a2c0-7fb7623ad7b8", "sighting_of_ref": "indicator--d76a628d-5331-4e16-9b95-eb0f7abd1c8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1411539-e079-4b40-b776-6d63032f195b", "sighting_of_ref": "indicator--f5d8a0bb-7ead-441e-be30-859952516f4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51f978e-0345-4493-8887-cd6668d58e92", "sighting_of_ref": "indicator--24af5a62-6e4f-4df9-b074-f2eb8950559d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9d0f5b-d47c-4423-86a4-c79e29449049", "sighting_of_ref": "indicator--31f1036c-812a-495f-b502-d2e0a365bfaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b4ea73-9acc-4a2a-bfe0-49812f22deaf", "sighting_of_ref": "indicator--5ddf9d39-3530-4ef6-a1c0-b6b79f0490db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac687c0-ff95-4239-9ca8-bab4ca8b820a", "sighting_of_ref": "indicator--77feb2d4-fda5-4634-b681-74cf54d37565", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3a8af9-ac68-4b7e-9107-b329061e8c09", "sighting_of_ref": "indicator--0ea5679a-dd15-4ca2-a6ce-00c8a01a92eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c012695e-9187-4768-879d-5a720c8caea2", "sighting_of_ref": "indicator--34cd7b54-b3dc-4d20-a8bd-e2f7af663a3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617b062b-8050-4e66-b575-c97f7804be24", "sighting_of_ref": "indicator--9b38380c-c6d1-4fda-bddd-ebb995e5e2b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e48ad9a-755d-4ea9-a564-69fb13dec796", "sighting_of_ref": "indicator--8e21acb3-3bf0-4be1-8709-27f58d591f3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5cbc16-4bfc-454e-9b6c-d507bf34616b", "sighting_of_ref": "indicator--00080579-83f3-4b8a-849f-7456f7c4320e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a729b18-e612-4236-a08f-cd21f0a347a7", "sighting_of_ref": "indicator--1b038e47-ea78-41a8-8434-638cf16ffda7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e03510a-7005-4278-8dee-551db4d3aeb4", "sighting_of_ref": "indicator--fd36d826-54ff-4ac7-892c-3b137016118c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b0ffc8-76b5-4306-856e-6a084056bb1b", "sighting_of_ref": "indicator--36dbbbf6-2a9d-4474-8f5d-9a0d798407a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f95986e-9efc-4901-a7d4-66b47a86ecd3", "sighting_of_ref": "indicator--cd65938b-9638-411b-8ab3-d03970eb12fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea5866-5aac-430a-888e-69a8748d4a7d", "sighting_of_ref": "indicator--06c6d572-31e1-4056-8fd1-89a62c48119a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c90c9a-ae88-4cf6-8d7a-951490db4bb9", "sighting_of_ref": "indicator--71c2088f-1539-400e-b96a-fe934800f3cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8ffa67-69ac-4212-a717-2281c6321e85", "sighting_of_ref": "indicator--ecad5d66-939f-4200-af94-efdf80fb0f98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46589694-3f41-44a2-8276-f0705281ae47", "sighting_of_ref": "indicator--252cccc4-0d3f-4bec-9252-5a8021212a1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855db76b-8a23-40e5-86d2-5fdf0bc2cd4a", "sighting_of_ref": "indicator--142db2a1-211a-43f9-b546-1ec21a559f9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b1f76e-0028-4572-b8dc-a9b2deb696cd", "sighting_of_ref": "indicator--0acb9144-7d49-4761-8832-256ff7c88857", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d8bff3-3770-4bbf-b086-ac5bd78c60ad", "sighting_of_ref": "indicator--c4a89287-8c3a-4f9a-9a44-f3b8c392fcfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b578b965-525d-4677-9b40-853c3b1e5aeb", "sighting_of_ref": "indicator--6968819a-37cd-49c9-9af2-ea51e3b2974b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ec7e1a-cfcc-49e9-a149-695c02bb0959", "sighting_of_ref": "indicator--6b00e5d1-5d62-4c6b-b638-3ed1b06f1e91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b118f02b-13eb-4497-9e8e-298640974a77", "sighting_of_ref": "indicator--26dfa71e-ae51-47de-96e3-4e1fc9a514a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a631a-f18e-4ac4-a5d7-a50a39ce1802", "sighting_of_ref": "indicator--fccfcc55-1100-44ff-a851-08c1c604ba2a", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212a411f-e38f-4add-8d38-3863a53b44b9", "sighting_of_ref": "indicator--0e8944e5-6737-4ec8-adf5-6737a250c7ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd38a25-606f-4c9b-a448-7d06c6ec1a34", "sighting_of_ref": "indicator--1855137e-d4e8-4442-b9db-7998a41df9ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4999a783-c01e-4920-94d8-80efb77a488c", "sighting_of_ref": "indicator--1a0d92b4-0675-4527-bf3e-532cc33ded42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d47cc1d-315f-4573-8c14-f1bd0469a986", "sighting_of_ref": "indicator--2bb56a64-0900-47b6-a32e-b37365f8f727", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aea52fd-91cf-47c6-ae19-cb7968846c68", "sighting_of_ref": "indicator--3ec0ee28-9e11-45e8-8c81-f0e19bb47937", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2404900-c8ff-4e2d-bf00-72e48cf373f1", "sighting_of_ref": "indicator--79b8d16c-2b46-4bc6-a328-be65c811eb63", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466e27c2-6040-4289-999a-b6e30e67c431", "sighting_of_ref": "indicator--1e75780e-a7c8-430a-9b2f-4f2d5a9d6568", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cb6132-f65a-4fe9-9d4c-09c3f0fd3b14", "sighting_of_ref": "indicator--f108b3e3-1d23-4b07-803f-23a4b3259e2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d74386a-4aff-4ee6-a165-80874aba1da6", "sighting_of_ref": "indicator--61ea2f00-1652-436b-a39d-bf7f81f5e1af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdcecf5-5b96-4816-8534-f1cf6f7d41a4", "sighting_of_ref": "indicator--1ec1ed98-db26-4e8f-83bf-f96a91b6cd57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9232f4d0-9a69-41d9-8461-f1325ec6b88b", "sighting_of_ref": "indicator--fd8ee3bd-a78e-4b9f-a57e-5842d963cc91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0197031-9126-4f5f-b80d-f23553a3d260", "sighting_of_ref": "indicator--d3e47377-dfdd-4d5d-9a85-0577a998db3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d94952e-dd0e-4eb9-801a-bdf341728f76", "sighting_of_ref": "indicator--78c5f82b-7405-48d5-9009-c4a6daebeb53", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea14ce1-dc99-4009-a876-0e159efa1233", "sighting_of_ref": "indicator--5810327a-bf8c-475e-99aa-e9b6a28bc614", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c6346-6959-4bf0-8cdf-9cda5650e7f9", "sighting_of_ref": "indicator--233f3f2e-2e5b-4aac-809c-f42b17499440", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a0a88-7e4f-4b8b-81bc-957740d1140a", "sighting_of_ref": "indicator--799d9ae3-8fd9-4ed0-ae12-6c89a5eb0fd5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81f3e5f-904f-49eb-b19e-6f198ccd871d", "sighting_of_ref": "indicator--4a348241-d674-46c7-9b9a-f9b9a5970561", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a00c5a-3357-4f31-b3e8-ce6b1164b342", "sighting_of_ref": "indicator--4def7adb-bb48-4781-adef-ca7edb01cdfe", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f6946e-fca1-4df5-9cc7-b2f5dca13dd7", "sighting_of_ref": "indicator--b343c174-a03b-42f1-9940-98035e4a5b06", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27b479a-bdce-4a3c-98f9-7c6cd021c9b2", "sighting_of_ref": "indicator--e3aec3c9-a23f-4af4-ba7f-babbd9baa5a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb15649-f09f-4926-8345-7e5abb09e27e", "sighting_of_ref": "indicator--06211cf4-316b-4c52-9a43-5e3744e53301", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1690a48-547b-4307-89f6-6dd439562078", "sighting_of_ref": "indicator--dcd750e9-80db-4d47-b7dd-1099269f22fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea13547-06d7-468d-b8e6-59acdb17246e", "sighting_of_ref": "indicator--b457f7d7-9d7f-47c3-b4ea-06de54e83fe0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11091497-5033-4b9b-a149-1f87dc8eb91e", "sighting_of_ref": "indicator--c7c69d95-2b2f-422f-8267-ca332d10c620", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf606dd-4aeb-432f-9c3e-bba967e20a92", "sighting_of_ref": "indicator--c45ab537-108f-4310-9dd5-1530e8cb50aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cefa307-f568-4b7e-9127-07850bcde9b7", "sighting_of_ref": "indicator--33c74f54-99ed-4704-abb4-2f644a1a1f15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79dbc9e-580e-4861-9af8-7d5aecf1c92c", "sighting_of_ref": "indicator--e62c07f7-af36-46e0-8e43-54186f43ad8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df82a355-50eb-447b-b69f-02013eebbe91", "sighting_of_ref": "indicator--62661de6-12c2-4d1c-92bc-e6757c5e471f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dbedac-e75f-47e8-bcf0-f2fa1ae54720", "sighting_of_ref": "indicator--ef5e2cbc-8204-4b43-bed5-61b5b71f9527", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97b1546-3e11-433e-8e58-06c0b29b69ca", "sighting_of_ref": "indicator--b4f61e08-70bb-436a-bdc1-989c4c72318c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936a2f8f-dd15-47a1-8a77-711f942dcc86", "sighting_of_ref": "indicator--c6ca8e44-6886-4b50-824d-5e4de898719a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbb4bc0-0d0e-4090-aa3a-c819bcaac1a2", "sighting_of_ref": "indicator--6101df06-23ac-4296-820c-7efa4bf16d3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c38ca28-6f36-4866-a631-280f2b28c6a0", "sighting_of_ref": "indicator--3a7f5bdd-d418-4501-bb73-759e3338900f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209062fa-689e-4fde-8cc5-cc3ee812e3e7", "sighting_of_ref": "indicator--0df0c7c9-e08d-46cd-ae3a-0f5580010d1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dccacd-b0f0-4e58-9534-2ff33f53086e", "sighting_of_ref": "indicator--0f181f59-67cf-4e9a-8460-e43bb95e8904", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9ade53-178b-44c3-8af1-c6c61fcb4adf", "sighting_of_ref": "indicator--d76ca7a9-cf07-4806-b2f9-f8ee4f7e9817", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99e9330-de70-4583-a695-cd74e02b9bf1", "sighting_of_ref": "indicator--0f9fc29a-3381-4d2e-9643-e581dd2d3965", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0d3e5c-427e-4478-9ceb-1e2f24967b45", "sighting_of_ref": "indicator--860cfb4b-3951-40b3-be4f-410f7e66b4e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8b1695-b8e7-4ed2-822d-bfb0e07650b4", "sighting_of_ref": "indicator--3490d5a1-cc27-4631-af70-8e91ad7521ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c83c67-13de-43c8-99bc-073d92b5e88e", "sighting_of_ref": "indicator--77e55697-6b36-46c0-8265-8969c614ef31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77819b1-94de-4622-bed8-2620723c09e2", "sighting_of_ref": "indicator--549d7d8c-0cb7-4524-9363-0eb5cc37ba6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fc1a39-3c74-411b-b385-e7169b7dce7a", "sighting_of_ref": "indicator--6407dd2a-285f-4aeb-a777-8caa1ceaad35", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b032a62e-2928-4ffc-81a2-6f6ee9e55603", "sighting_of_ref": "indicator--b552b471-3385-4343-987d-b2de8111f226", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765033ed-0e5b-4be3-8c9d-f49d2b7b199b", "sighting_of_ref": "indicator--9feb6eb3-044d-4073-8506-cf41e789625c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9c116b-beca-4d4b-8b79-4d8276ae1201", "sighting_of_ref": "indicator--8aa14942-9d93-49a4-abc3-c633ff525589", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01058a74-de3f-418e-86ad-256d5d398490", "sighting_of_ref": "indicator--bdff66e2-3297-42f3-b432-d012149112d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504faeeb-49c5-4daa-88f1-e2b25e08b162", "sighting_of_ref": "indicator--27b82625-2dfa-43e5-870a-0480aa78c587", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46480b93-4906-46a7-b580-0eeaeddc3292", "sighting_of_ref": "indicator--2e0d148f-b357-49f2-991d-af5880c9b0bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b623a89f-4fa7-4054-b65d-281551c2d869", "sighting_of_ref": "indicator--27c242c3-2c1f-47a1-b46c-43979f5977e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2695e4-da1a-491a-a28e-1ed56ec22b3d", "sighting_of_ref": "indicator--de57cd06-f9e7-4cb1-8eb9-8c242025e45e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deae904-6c54-45d6-ac24-f08ccb041273", "sighting_of_ref": "indicator--f0e7f94e-a025-4893-a140-2c8499167816", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeba80fa-c651-41ca-95c1-c4a413e6f615", "sighting_of_ref": "indicator--205f4222-89ed-4851-8efb-9f1b974bade6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54367cf-379c-4b8b-b593-0435b8dfccbd", "sighting_of_ref": "indicator--84d787fd-b091-462e-a259-c46f7658600c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067ab21f-cb42-4960-bb46-100e73460be1", "sighting_of_ref": "indicator--f768244c-aeb7-4e00-8995-bbdcb159fada", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dd956c-dd52-4b2f-902f-65fcb84f6433", "sighting_of_ref": "indicator--eb81141c-63b0-4ab2-87e8-05752a2e02b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52bf425-8933-4727-9ca7-194a3f105060", "sighting_of_ref": "indicator--0d26825e-b2c9-4182-a4a5-54edcf762166", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b08ce4-737d-4706-a3f5-5fb90000eee3", "sighting_of_ref": "indicator--0660f050-7c82-469f-aba9-352b8c1ba6be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d41c96a-c654-4fc6-be10-c5c49d857ef8", "sighting_of_ref": "indicator--ccd64faa-282a-4925-930c-64ac8948bb40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ceec60-3990-44f7-add4-ced5e596c5d1", "sighting_of_ref": "indicator--cc8bd283-cf2b-4dd1-9d52-2dd298231242", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb86433-7170-44f3-9fb6-9c246179b704", "sighting_of_ref": "indicator--75f1b38c-eb66-44ad-bee4-c4f1680a1d43", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8743ab-1ade-440e-8b7c-c494e04829dd", "sighting_of_ref": "indicator--503c1fec-c7d2-4fdb-b037-47d1f60bea50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c4dde8-42d8-4574-97b8-9452f183ac8c", "sighting_of_ref": "indicator--9206b8b3-a5b1-47cf-84fe-f62f2af3d5ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c86b58f-4a1c-43f0-b9c6-a61c6abf9697", "sighting_of_ref": "indicator--56eb26cb-07d2-44f6-bb37-825382df6f30", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3de1a2-83ad-44a0-87be-d0f2a35d3714", "sighting_of_ref": "indicator--2a4576db-e0b6-4264-896e-b743750305a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e853f96-708c-4511-94b2-3f49f9f74c0b", "sighting_of_ref": "indicator--3b14c990-0ecc-4b34-8576-4cdf5bf62310", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f051d-e4a8-4fd1-b20f-69ec70a68b55", "sighting_of_ref": "indicator--ad54aec8-8404-4287-aeba-b78bdbaa446e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9b961c-0fd5-4b77-aeb3-ccf1655a8648", "sighting_of_ref": "indicator--7704461e-2012-438f-8db9-f104d06544ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090c72b1-76af-4635-b28e-59033cf7d9f3", "sighting_of_ref": "indicator--0593ac04-9297-4885-aea3-76ae1367b8b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e625d8-d8b3-41d9-95fa-b604fbebf2c0", "sighting_of_ref": "indicator--f6700786-17f3-4b65-ab4f-c22b74e6c1a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f829185-13d3-4143-a1ac-7b37fd2be250", "sighting_of_ref": "indicator--45be1229-30c8-40e3-84d2-685a86497591", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40058e0b-3b39-4d83-82b1-25a342c2b5a1", "sighting_of_ref": "indicator--a090af4d-af0f-4b5c-9d5c-610f72848348", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6112e706-180f-4e51-bc65-895aedc9fd27", "sighting_of_ref": "indicator--a34c3207-e1d1-4cc2-a040-eadabb19afaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7e2d6e-d8a3-49b5-a312-6799dcee50bc", "sighting_of_ref": "indicator--020a2d0c-cf6d-4481-b6c4-d56924eb3b4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72770c86-0f5b-4d21-a050-cf04db865a7a", "sighting_of_ref": "indicator--e87adb15-2b21-42c9-94b4-a09e75a9652d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ebfb49-a6d0-4c98-802e-810582ed3974", "sighting_of_ref": "indicator--750ef63e-184f-4dbf-ab53-2dbd140e97d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de76bc97-6429-4d7f-839c-37c09e5f6f05", "sighting_of_ref": "indicator--15d29cd5-d83a-4de0-8cd4-6ff27fcbd63c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b74bbc-0d86-4d02-ad9e-8d9881ad11b5", "sighting_of_ref": "indicator--6ec33fc3-97f8-48a8-8051-6b86e991eecb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aa73d3-0ee4-48a1-b598-d36a5fe297a1", "sighting_of_ref": "indicator--7127ae30-6816-4cb8-840b-0c84d240368b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acad508e-e974-49fe-a986-6f74ffc58fa8", "sighting_of_ref": "indicator--4628a56b-4bc4-409c-b1e7-2021f37e0965", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b89df85-6de9-4180-a0c2-8533c985b212", "sighting_of_ref": "indicator--4b04d7e1-6ffb-407e-91f9-0d3317ab4ecf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92ab81e-271e-47fc-9e3d-82d852936248", "sighting_of_ref": "indicator--36866951-36e4-41ed-a3f8-078b693b3e71", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf4d045-c5d7-4dd6-a8ef-3b47cd45d340", "sighting_of_ref": "indicator--70d90071-874f-4c54-94e0-d671a057f2cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90264283-efe3-42a8-8e66-705dca72c602", "sighting_of_ref": "indicator--fe4a40ab-0c5e-4f99-a432-b0bd444815e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4004d9b-a45c-43a7-9c08-ca9a4caaf1b0", "sighting_of_ref": "indicator--e01f4410-bc40-4c10-982a-e45354253f92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dbb438-7bda-4bd2-b218-5d340cbbac23", "sighting_of_ref": "indicator--b19e4d19-eeb5-4739-a5e9-bb5db2094ea5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cefb6f-e11d-41f7-9f19-a9e888c22c4d", "sighting_of_ref": "indicator--240e4dec-6bc5-442a-8611-edb4f1dcc5c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd277462-a56f-4745-9ef6-46e72269c50d", "sighting_of_ref": "indicator--b393caa5-4a2f-4915-97b0-df762bbd61ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d55046-2ac0-4bc6-8b55-5c1d6538d89f", "sighting_of_ref": "indicator--9e64cdbc-3a99-4562-852b-f715c89dc997", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea039be0-655d-4932-8c36-eb36c236a8a1", "sighting_of_ref": "indicator--82deee6e-313e-4587-9a50-4c2990427cf3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c76de2-9d31-4ba5-9122-b3b780c977e8", "sighting_of_ref": "indicator--44da0825-5d79-4cbc-8176-4385d80808f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0153c9-b192-409e-9fa4-d51394dd6b2b", "sighting_of_ref": "indicator--585f68a6-382b-445d-9526-81e24bfc0859", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79939cb8-b435-4f54-9ebc-1bf73cbb493e", "sighting_of_ref": "indicator--d37f93a6-d6f4-4c8a-b31a-a1bf90bc505e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802b645f-d69b-4565-a4b5-d4d0e5f3699b", "sighting_of_ref": "indicator--3a6d16b3-f243-41ac-819b-dafeb68aafa2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494c59d1-edf2-4d95-90fb-fd9960b10448", "sighting_of_ref": "indicator--ebbb4628-19ff-476e-b610-529e0047820e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35af2b47-491c-4281-a588-ed2c715b8db5", "sighting_of_ref": "indicator--312eb5bc-7ad2-451e-99ed-0ae93398ac69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cd28c9-eb0f-4f5f-9a4f-c49ff54cc317", "sighting_of_ref": "indicator--6404abda-cd4e-4e06-a8a0-fcadf651306e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733c01d6-2ad9-40a7-836e-27fa29db5d25", "sighting_of_ref": "indicator--4350ea36-4130-4cc3-8b90-f0c9000fa71b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878db211-d1c6-4c3a-9ea0-2899cd5e4704", "sighting_of_ref": "indicator--5e5f1a81-76f4-476b-a5ea-bb62249535ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a043ab18-6653-4c6a-8fe3-c3caea03d634", "sighting_of_ref": "indicator--32eb9d0b-f14a-41a9-835d-8e0528be8bb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd7cedf-e994-472c-b4cd-095eb6035d3c", "sighting_of_ref": "indicator--5fa03ff8-3912-41e6-a698-f9e43472c320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b461d15-fb38-4fd2-848f-2c016481df5c", "sighting_of_ref": "indicator--f9256337-7fea-4f03-a91b-d485d0fe8643", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443583e-8f1d-401d-a00e-69fbe0eabfdd", "sighting_of_ref": "indicator--c7a20bc4-3c0c-44da-bd10-3ba6ec7370a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae4c347-9f72-4e76-8dc1-2b76283206c8", "sighting_of_ref": "indicator--3d28335d-805e-41aa-95c2-758238bc2c6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a71446-92ad-4512-8a48-92eb68bd582e", "sighting_of_ref": "indicator--753d4a66-3134-4b00-a767-c67b59f98d6d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c603a4-c267-46c9-a14c-a71d0517bfdc", "sighting_of_ref": "indicator--32053d02-c49e-4693-8587-e6899c13b7db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e78136f-e9cf-4814-ac7a-df066c4eb9e4", "sighting_of_ref": "indicator--b0018002-c37c-4765-8383-8e81d210d528", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63881654-d7e6-4a12-92db-8f2726af26e2", "sighting_of_ref": "indicator--f0386d4e-eb7b-400e-a5e6-2b43c43d84ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e853eb08-3988-4829-b69d-78c86c5ba7ea", "sighting_of_ref": "indicator--cd8826ac-b09b-4a36-bd88-75acaf143d96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c2b711-c770-48b8-a932-4354c463bb9c", "sighting_of_ref": "indicator--6df5160d-5326-4410-b050-32cf1219ac05", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff436e7-04c6-42ec-8ffa-b17a96ee0123", "sighting_of_ref": "indicator--5b69cbde-778e-443b-8988-1267797213c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8b49ba-6b0f-4f93-ab20-51982fd5e601", "sighting_of_ref": "indicator--e834a7e8-2ada-48a3-9b62-e8730f791a9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3af68b-8226-4f87-9caa-8ca5482dad2a", "sighting_of_ref": "indicator--e27057b3-07cc-4b6b-b099-e01fcea33a0a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c7ff53-d647-429b-a761-cb6b7d1ce0d3", "sighting_of_ref": "indicator--b07bf9bb-ee16-44ee-84a2-3290de8919bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc653f-e5df-4180-b33c-4fdd1503eb11", "sighting_of_ref": "indicator--9499c31b-61b4-4e23-8e5f-a95e2c7c638a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26985f11-d58a-49f2-9f97-f4fb0e5a3d8e", "sighting_of_ref": "indicator--e9bce579-b2f7-48c2-8791-8c410c39761f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7873781a-d977-47c7-a7e7-221b0392d426", "sighting_of_ref": "indicator--24619267-a39e-406f-acd6-01c54678cfd8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc0158a-af63-489e-8a3f-07024a56e537", "sighting_of_ref": "indicator--dc6ec069-583c-4dd8-abeb-fd12d61f4268", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521af0e7-1883-43b9-9834-5534b61184c8", "sighting_of_ref": "indicator--2bc3db73-1adb-4145-93ff-cc7aa9e9616e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86347c71-33f9-418e-a382-5ac9923c523a", "sighting_of_ref": "indicator--d07a1e6a-4c24-4b35-b139-fdc3704d220f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beecb99e-802e-475d-9afa-ab7f35830f50", "sighting_of_ref": "indicator--2b264ac1-afd1-46dd-8ab3-8f9310477d9f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0526d04-d0e2-4a83-84db-50af1af95430", "sighting_of_ref": "indicator--5d33dedb-d267-4aba-899f-e7fb545950f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0185eb7-01d6-4b13-b995-34f02d63833b", "sighting_of_ref": "indicator--30ff2fd5-4881-4ea0-9e18-cf59879a890c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa972bfc-bd83-4036-9bc8-f07a28357649", "sighting_of_ref": "indicator--b7ddfb48-425c-4386-a4d5-95598333552d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e2173c-12ca-4553-a1b6-d7f709618420", "sighting_of_ref": "indicator--b5448c9c-4d23-44b4-b60a-d8430e868b4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b7ae2a-b0e6-4333-be01-9001f0dfc46f", "sighting_of_ref": "indicator--ec000135-7a1e-4194-914b-bfa3b1ee0e74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb63695-0f31-4900-9d5d-c1ec08b0c784", "sighting_of_ref": "indicator--5539128d-b013-414b-806f-f1d1834a635f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fb7f0e-c385-4198-a0d3-0eebc6eb24d2", "sighting_of_ref": "indicator--f0da0ed3-cc3a-4e2c-9a0c-22f71bbac8e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55aafbc9-cae6-49ad-b5f1-9d241e7f877d", "sighting_of_ref": "indicator--6a3a01c2-79b8-486a-8ba7-43d273aa3688", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca496a3c-006c-4b58-844c-8d50ec7d9b36", "sighting_of_ref": "indicator--435378c9-4563-4d72-ac8a-2643cba9916b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cbe8fe-3877-4525-87a9-5deac0b8110c", "sighting_of_ref": "indicator--5a3849e4-7c68-452e-8535-8f55df9b81ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc76cc90-ced8-4223-b6ab-68af201d22f0", "sighting_of_ref": "indicator--f4e6d5f0-4819-4ced-b1b6-71a208db271f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d08df1-99db-4b2c-a600-4782187d9ce8", "sighting_of_ref": "indicator--3a4b420c-143b-41fd-85da-633c121ebebf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc14cae-440d-4db0-8fbf-3c1e39af9896", "sighting_of_ref": "indicator--35431171-61ae-4baa-a04f-458f7a0d2a23", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eeede5-f5c9-4515-a33a-2f31c97dac39", "sighting_of_ref": "indicator--210e6d6c-1cad-471c-91f5-058547413386", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba3195b-a90d-43c7-a7ab-03d163676578", "sighting_of_ref": "indicator--25e29778-cf28-4487-925d-767727940419", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509460c3-1fc3-4d88-b7c4-978a95a71a49", "sighting_of_ref": "indicator--e4df44ed-9cab-42ee-9610-90762b0bad35", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51f0543-c161-4557-9bbb-c7a90da7190e", "sighting_of_ref": "indicator--8ddf4091-0efd-4b93-bfce-9cf4677849cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fdd280-0422-4385-b249-c5114eeb448b", "sighting_of_ref": "indicator--5270b702-3f55-4b9f-83b0-fee73e4aed16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7585da3-a1ac-48b3-8997-8b55bc69919d", "sighting_of_ref": "indicator--22f36a91-b285-40dd-808d-db607317535c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea3f78c-6f69-4237-bea8-2b3548ed8572", "sighting_of_ref": "indicator--1a92c45f-2ca5-4de9-b7cf-00f0e1570b32", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6de010-2a40-4018-a406-45a1134c38fd", "sighting_of_ref": "indicator--67516aa7-e7e1-4f17-844e-29d8e448d6da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79abc030-2b8f-47a4-843f-d8b0b12ceab2", "sighting_of_ref": "indicator--e9f94240-9e15-4edc-9e1d-807bb5a70a46", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421ccd8f-297a-4d2c-8ffe-9649dc4a2df1", "sighting_of_ref": "indicator--b6367400-f3b6-49cb-b017-0e5740cf21bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24050cb6-5153-49e7-9d5b-7ff9791d5431", "sighting_of_ref": "indicator--b12b0fea-7600-491b-83ef-dd5beb8e9304", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0c13b8-96c7-40a8-bf9f-21d104e1f245", "sighting_of_ref": "indicator--d090c9b6-f189-4008-bca0-7296d93688c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c76f24d-d3a8-40e0-b9c3-f5e7515e8b29", "sighting_of_ref": "indicator--5a836e28-7577-43ec-ab28-11c69be46cfa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea9e9fa-78f2-493c-8344-e5c4726b9ef4", "sighting_of_ref": "indicator--41061c60-bc50-4a80-8135-a9b96ebdaf42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ce611e-a3ea-4caa-a79a-25d1415eedd7", "sighting_of_ref": "indicator--9462b617-31aa-40a6-967f-3a7ebaf4c16d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a594a797-8f0c-4c33-a3cc-4857c9590f8c", "sighting_of_ref": "indicator--517f71ec-7e3b-47d1-882a-9ca86bc47374", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395d221e-abe0-414c-8345-dd01250bb1d3", "sighting_of_ref": "indicator--c70d3702-5cf9-4430-bfad-69e5c587097a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec91d597-50ea-485e-9e92-1fa32f502289", "sighting_of_ref": "indicator--83494e9d-eafb-4b79-add2-94e2c14d9799", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90136dae-e345-4406-9604-76961a3c7683", "sighting_of_ref": "indicator--347bb2a2-9364-4fc3-a655-c68775139b2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f3a5ab-c84b-4a8f-a7f1-f6994fe43ad6", "sighting_of_ref": "indicator--d252df39-7fe9-4a4b-9c58-1bdc93393ecc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e3f933-b512-42d6-921e-63484f7a672b", "sighting_of_ref": "indicator--088de312-4092-4860-90ee-53a0d363db96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae066e5-6ea8-469e-a514-72357a77cd9c", "sighting_of_ref": "indicator--89f33b2b-1baf-4375-b676-9b79927b8572", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a39d24-d2bc-41ee-969d-d37a22d998c8", "sighting_of_ref": "indicator--877ce491-51d5-4660-b287-8b5c33e62c8b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9515cf22-f790-483b-9aa1-c606fca25c37", "sighting_of_ref": "indicator--79679e1e-eaeb-4b5c-be9c-c3e7adebe36b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17da55fb-f07b-4153-a09c-95ba0099ac14", "sighting_of_ref": "indicator--90141e98-3660-415d-b420-027212290cc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec77fc9-3b9a-42d8-99fa-985e624dad52", "sighting_of_ref": "indicator--c265c3dc-bea6-4a52-9db8-5388f04296bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b16ea6-cc39-40cc-b995-f529f9d49438", "sighting_of_ref": "indicator--21180bb0-b22d-43aa-a9c9-e5459a4afe9f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b5d1ae-e29b-473f-ab03-b42b1813ef29", "sighting_of_ref": "indicator--db5719e9-4470-46ac-bc4c-59c3fb0f26e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4d39cc-cbb4-41ad-a27e-ada09617e2c3", "sighting_of_ref": "indicator--4cbcdb5f-c48f-4752-bc5e-402a392222b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378c9791-f31e-4316-8324-08137da770eb", "sighting_of_ref": "indicator--c23a55cc-b0a1-4d4b-8f45-58cd484299e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eedb32b-dc88-47a1-af08-e43863101c8d", "sighting_of_ref": "indicator--2297b56a-dd9d-4907-bae8-85c840db720c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2f895f-20d5-461b-8573-c9e94c06a83d", "sighting_of_ref": "indicator--bb07a9fd-4aae-42e6-87b9-74e22e142740", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4491700f-000e-42ef-b5a8-872691e6911c", "sighting_of_ref": "indicator--c02260fe-eef4-4d23-929f-d802b15778df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5014fd4b-b7cc-4155-baf3-a2d31b465982", "sighting_of_ref": "indicator--5081ea05-5d6b-443d-9fd9-55aa989f6fe5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267938a1-fe8e-4555-ad08-247765bb9843", "sighting_of_ref": "indicator--13b9b572-10a2-4557-b5bc-5f3b0326d9b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d707b5-cc3f-46ed-ae2b-5958ff357ddd", "sighting_of_ref": "indicator--d4f7b7b3-9576-4474-ab33-a1be7c09ec07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3f5c9f-a44d-49e4-8927-dafa4a566d0e", "sighting_of_ref": "indicator--6609f73d-c9f5-4260-8ed8-334420af66c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85396ab5-4e83-42a8-a874-d0aa76a0eea3", "sighting_of_ref": "indicator--f2e6ca57-070a-4de3-beb7-b4fe86ffc6d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7926a1c8-6681-4d24-953b-1c08e8ffd7c4", "sighting_of_ref": "indicator--1b5a0fae-eca6-4ca8-947a-fa0c065c08da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c5e4d4-98a2-498a-9587-ecdda2b70f07", "sighting_of_ref": "indicator--f0a91012-e615-4b01-80f5-45023805bd93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91c075b-b090-4bfd-9e2e-b77c5a8067c7", "sighting_of_ref": "indicator--f72b39eb-784b-4a4b-b465-f948add84808", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a810789-8c34-424e-abdb-fc3011c46c54", "sighting_of_ref": "indicator--39b51a6a-3b00-4eaa-ac89-29d48956225f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cfd388-d321-45fc-bf5b-d777f8510f49", "sighting_of_ref": "indicator--c78bf276-5d68-4512-95e5-48124b816ca6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e530f1b-b245-474c-9a4c-4ea29a88ffc7", "sighting_of_ref": "indicator--26ed2e75-d800-4b10-8e9e-b995f1055ab5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce29b164-34d5-4e03-a04c-0bddec57795d", "sighting_of_ref": "indicator--5fbfe27d-64f0-457c-9171-010402673fd5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d979257e-9a50-4df7-9dba-0082c26f9e73", "sighting_of_ref": "indicator--0518b6a2-e79c-4b07-a9f1-1a2ef7de9483", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651802cf-5910-4d2d-acfe-76726de1d5a8", "sighting_of_ref": "indicator--1f7cbc68-25a9-4838-8de1-23e554e33601", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eb84d7-fb2e-42d5-8e9f-fb320104385e", "sighting_of_ref": "indicator--e97ffafd-dddc-4b88-8fc9-ecb9162b0656", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c811be-1dd9-45e7-9a7d-640978abe56a", "sighting_of_ref": "indicator--7106a59a-4ce9-43dd-a306-cd84e54f2e88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a819894-857f-426d-8bce-a4723a8cc19d", "sighting_of_ref": "indicator--67c8d182-e03c-4100-8867-6043d9f6ddd7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2aa815-ef51-47a0-b9ce-73e45ae0963d", "sighting_of_ref": "indicator--fe51ab85-91fb-415e-b885-5813293eec79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb2affe-5b37-4f4d-b73c-e4f57881bee4", "sighting_of_ref": "indicator--6903d8ce-3425-4fc4-8494-0aae54deca5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3721f2-26ce-4dac-b272-0dae0b03ffe9", "sighting_of_ref": "indicator--b8fe5c12-3895-4be4-a81a-1a554ae61981", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9a1f0c-def9-4a58-b80b-d2b57b16285d", "sighting_of_ref": "indicator--c8611cdc-8b2e-4b23-b568-eeb8d75f419f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4116f7b-a627-4f61-bb3b-d6da8a4e4315", "sighting_of_ref": "indicator--78ab2c2f-5155-4e8b-9ce2-f66386fb6338", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1934ff-ce1f-40ca-b163-55ce3d514b00", "sighting_of_ref": "indicator--f1ca5e86-5c39-498a-b3a3-ce7f272cca55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b540162f-ee1d-438a-872f-5387b97e549c", "sighting_of_ref": "indicator--2619d3b8-121f-4579-90bf-16379fa7f752", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad09bcc-9864-4818-90fc-88f40227013d", "sighting_of_ref": "indicator--9c477537-42be-4d02-ad6c-c7dc1dc7d4a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeaaedd-d4d3-4ee9-a872-2f960bac2fcf", "sighting_of_ref": "indicator--b9178b96-4752-4867-b29c-62905302a19a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7ba1e4-08e4-4202-a9b3-8539650d2772", "sighting_of_ref": "indicator--a35b33b9-0c9d-4e05-814c-5ede87f78363", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74a9c68-ca93-4c31-bd50-479af0457885", "sighting_of_ref": "indicator--f9ed66c6-d8eb-46c8-a6e7-715d6b9ee54a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cb9540-91de-4a5f-89ec-319c3cd52b7d", "sighting_of_ref": "indicator--2cccf482-5803-4a20-97e2-bd67ece01d51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977b51c2-e683-4d91-a0a3-3b8f4987e74b", "sighting_of_ref": "indicator--7f35285b-c009-4564-b159-c5d7186b3946", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea319e8-01fa-4ede-a2f1-6a04111dd82c", "sighting_of_ref": "indicator--0f908238-ab9b-4a45-9d28-3e456b3fa417", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b0a051-e317-4ed9-86f4-2b4201476139", "sighting_of_ref": "indicator--a18a51cd-385f-403a-9449-191705d66fd2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bbce54-ba44-4aa8-a414-be3d04e93f67", "sighting_of_ref": "indicator--a11bc4ea-5f01-428e-99a1-f56e3a18fc9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a9560-17ee-45c6-b79b-f970d46f3865", "sighting_of_ref": "indicator--cd7a3b93-93c4-4bde-b030-1fdc12461ea5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40580be-deab-4ed6-807d-1f02cf569fe2", "sighting_of_ref": "indicator--040c70d7-a089-454d-ab34-5c9fef97159a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4f063c-4781-408a-b799-973279bc56ff", "sighting_of_ref": "indicator--22636fd1-d910-4810-8bf3-d6990bd78b16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f5e210-18e5-465f-b0ba-186caabde7eb", "sighting_of_ref": "indicator--7fcaa6a1-e136-4a4f-a2cc-5f90b7f609d4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ed11bd-0bfe-4707-a28f-147add31ef45", "sighting_of_ref": "indicator--f1dded43-d469-4776-a9d8-876c7c1642d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89ee4fa-85e4-4a14-b78f-e748aa2bcf4b", "sighting_of_ref": "indicator--7d144ec2-1a1e-4c90-bcce-82a94ff7d03e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aefe5d3-82ab-4e94-bade-9ea7f693fc02", "sighting_of_ref": "indicator--bd5db0da-6077-4666-ae50-932b5070f781", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7d5460-dc74-4ee7-a8b7-d69cc6ecc30c", "sighting_of_ref": "indicator--3e610409-2be1-4cbb-9204-0b2c0732c0a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fe442a-82a8-49a0-9386-81676ee0f40b", "sighting_of_ref": "indicator--c48ce7f0-44fa-4b3e-8caa-c01a6a8c56c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c2acea-d391-4a23-94d3-c497fa18727e", "sighting_of_ref": "indicator--845ee3e4-6f87-4dbb-a7b6-4c47b7ba3c31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5c4a92-28da-4c64-a9dd-d6a70ccc94e8", "sighting_of_ref": "indicator--de93ec9e-1b86-4586-9924-527f3a4dd4fe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135b49e4-8724-4602-b03c-8e4e8e8fdb47", "sighting_of_ref": "indicator--6f83bc2f-8a46-4460-8c18-7fa46731fd34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0670143-a8ea-4644-83f8-7799ed3ba7a2", "sighting_of_ref": "indicator--2fbc5a53-e22c-4b34-b22b-6d551b66dbee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2e7654-a1b2-4a02-b85b-3fff9f5cdff3", "sighting_of_ref": "indicator--4f4e795d-1826-4d49-b57b-43ba93de282a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f966c3ec-610b-40eb-ac7a-8bd365c7c446", "sighting_of_ref": "indicator--0ba93a2f-840b-4581-a261-30b9027d3fac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e7c7fd-f75e-43ee-95b9-8a9ec45f7f02", "sighting_of_ref": "indicator--7e6772c5-cc47-4680-9bf3-bc1c2aaed0ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c504747-5f9f-4576-8996-7dd2cd48e178", "sighting_of_ref": "indicator--41253c4c-c08e-44e2-9e56-3a3368de5a6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5867653f-1ac7-4a91-975d-3b4362ec82e9", "sighting_of_ref": "indicator--57bc7e69-cd7a-4fef-870c-c302fb6d9518", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a35110-5669-4b2f-ac5e-8472a8947cd4", "sighting_of_ref": "indicator--5ac786ed-aeea-4332-9cc5-bbf40a7e4806", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e85aa1c-03c8-480a-9542-a777a9a6260c", "sighting_of_ref": "indicator--a514fbc5-6281-4e9c-a69c-b48b2fea3f42", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac122174-06ea-4261-9f62-f812ef72125d", "sighting_of_ref": "indicator--f3adac1a-8cda-430d-8afb-9c3d4ef3986d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ad7a1c-37a2-4b12-aa45-a6210cef0210", "sighting_of_ref": "indicator--1fca0a09-6278-497b-ac9c-3576fda4c5ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8247eef-25d4-491b-90b6-f6bb1d91e8c6", "sighting_of_ref": "indicator--9e1e5a66-ca63-4b9c-9159-2697eea58b40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df139439-d791-4bbc-88bb-05ec173b6693", "sighting_of_ref": "indicator--438ce58d-9086-4916-83f0-9b24938abe4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d50944f-1171-4d78-b4cb-1686799c6a09", "sighting_of_ref": "indicator--4f1dbe50-5aff-46b5-9228-c973f6181d13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be18546-e7d9-4461-8db9-9600e977ab2b", "sighting_of_ref": "indicator--99721726-f0db-4250-af0e-8c78d876eb91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4988f709-a51a-4bd8-b4ce-b6898a12243a", "sighting_of_ref": "indicator--f190f316-6269-4bd4-b1d5-7a7f2592908d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21367971-916e-4552-8284-c7cda4f1c2b5", "sighting_of_ref": "indicator--c4d10ad7-8c57-4015-9858-7893620c9cf7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfbccb4-67ec-41d8-bed3-85c557b412cf", "sighting_of_ref": "indicator--a65050f2-68d6-4723-9356-192e6363ef76", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ff457a-1a2f-4ce0-bce6-ed73b60e1f98", "sighting_of_ref": "indicator--9ab17be4-5aab-43b3-8524-5a2e4a393c7a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6882e67b-98a4-41c5-96a0-4f73a1e3af92", "sighting_of_ref": "indicator--a53ca072-9b70-45c1-9697-a91718fa5bdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eaec719-af7c-4002-8f37-af24d5cc374c", "sighting_of_ref": "indicator--a35a9686-da68-4f8d-af74-538c42bad396", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967ce804-3d07-44c1-80db-669a5144326e", "sighting_of_ref": "indicator--2c374ad4-4537-4a62-9c36-f483c00f38aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c778a1bd-6502-4039-a896-6297fa3bebcd", "sighting_of_ref": "indicator--40749676-97e1-4f18-99c8-a867cf4849b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415cfdac-e515-48be-b049-f6e31c2d3049", "sighting_of_ref": "indicator--10a34483-3730-4381-abfe-25fe37f9b615", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efb9940-d2b2-4ba4-b8d3-057e0551828d", "sighting_of_ref": "indicator--f4df722f-6909-4cb6-95f3-0eb817c56863", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3de8d1-3109-4860-b19a-94d1158d7f1c", "sighting_of_ref": "indicator--9c702681-0561-4424-be09-51a13b06afe3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70dd5f1-1d99-4c87-9f75-4593d902d8f2", "sighting_of_ref": "indicator--b24863db-2a41-4d26-8af6-279b66cd893d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f4e5cf-d68d-4367-a61c-c0b81954ea88", "sighting_of_ref": "indicator--12a489c6-e2f4-4a89-895f-8d1c17eeeb59", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315db6db-b04a-416d-956f-9301606de562", "sighting_of_ref": "indicator--7e584c86-40e3-4927-b2bc-f5bb5a1f38d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990a7b5-756a-4de5-ab50-82b7610c2939", "sighting_of_ref": "indicator--15eaf881-e3a3-4258-abe2-1e68f878797e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae10200e-35a9-414f-b364-8e15a6c789d2", "sighting_of_ref": "indicator--77e90a68-4f3a-4f33-84b2-55bd7e66e342", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f34554-5ac1-4eff-9f86-654ee303d016", "sighting_of_ref": "indicator--59d0f929-8dff-49b8-aff5-3284f5bd808a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80313bcc-ba03-464f-9fa4-5df2d20cc696", "sighting_of_ref": "indicator--049f9321-b629-4a30-a823-0d5885bdbbfa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110b1079-ce1b-408f-9733-cfc34541b4be", "sighting_of_ref": "indicator--4fa70cee-a2f6-4eae-abc8-2be8d433f6a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0435992-7985-4327-92eb-888fe1c5d131", "sighting_of_ref": "indicator--abdd54c2-ba9b-4508-a4c5-b6146a29dbfd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029e9a56-d0de-4e02-8f49-e422cfaa44a3", "sighting_of_ref": "indicator--248d1fa7-be33-4e82-945b-466fb0bd60d5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a885c3-32dc-4413-ba69-bd854c5432b7", "sighting_of_ref": "indicator--579d8947-e422-4334-8ca7-cd347ebb08c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc47809f-9eda-42d6-bc94-d046e36d0c3a", "sighting_of_ref": "indicator--9b0bb508-e120-46ee-92e1-390fbd26053e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ab6764-dfb6-40f9-8118-167ef2a64aad", "sighting_of_ref": "indicator--8e636977-8cab-4259-8221-2213e18c8c71", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61d87de-2338-4315-b6e4-0adb2145dc84", "sighting_of_ref": "indicator--1a579526-4465-4692-8964-79fe80394026", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfef410-93cd-4114-b969-5c5c736b31b5", "sighting_of_ref": "indicator--b68d9c28-4393-43e9-b768-cb03ececf6f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99fbce7-10cb-4a07-80bb-b7e3cb4a1e6c", "sighting_of_ref": "indicator--f5a9bb7a-a8d3-43d4-a2fd-c8f020b7c8f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc87c8b-ada9-4826-9d63-8e8326ebbbea", "sighting_of_ref": "indicator--e81c0c66-4831-4b08-b064-4592329dc5a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03937939-d2ad-4040-8746-47db52be6050", "sighting_of_ref": "indicator--18cfbc0e-596c-426d-adae-2ef863a9b2c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168d32f3-3666-4c38-90cf-404a8d9ff58b", "sighting_of_ref": "indicator--333e7887-7f1b-4c2d-b698-92e2c311b05b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6643eb82-e8dc-4a29-ae81-954ac20c90b6", "sighting_of_ref": "indicator--29685180-a1af-4ff2-8af8-2f4160c8f6ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028fba36-b9a6-4b03-be22-833bc5c016d9", "sighting_of_ref": "indicator--5312af17-bc54-4a1b-8561-91f0488cc330", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39b32a1-61bf-41fc-aa42-6125bcf0face", "sighting_of_ref": "indicator--a3dbce54-76f8-43da-9d82-51f165bc9cc6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da5b4a-fbe5-44b0-be1e-7f445be9bb6c", "sighting_of_ref": "indicator--956f9ef1-b165-4af9-a89a-f5b90fb13a57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d69bd06-7d19-4673-89eb-e7a5ea9917cb", "sighting_of_ref": "indicator--d490a245-ca7b-41e9-9e3f-528052c87a15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f75b271-84ec-4592-8d91-c60ffc958f84", "sighting_of_ref": "indicator--534bc0ff-c1d3-4b19-b340-ca43eeea8d46", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c97b5c-2d0f-47bf-91da-6854ce1dd668", "sighting_of_ref": "indicator--8e93bc87-7a52-467c-8926-e7c1f71af4d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0897ed4d-09d8-48fc-a591-8a95b4562709", "sighting_of_ref": "indicator--9179589e-4581-4d11-b261-fa5d0e28f344", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7057b9ce-0d10-47e1-9d95-2947b88e510b", "sighting_of_ref": "indicator--84d3d32c-9a3d-4a49-8035-e5293cab2ebd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2941a7a6-ba04-4e2d-b5f2-aa44adef3e06", "sighting_of_ref": "indicator--6ab18ae7-b5fc-4c2c-94b4-dfbc063e80c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c55a804-27b1-4000-9e0e-13ce3dcd0bff", "sighting_of_ref": "indicator--af1bb86e-cda8-4a49-9ac5-c6b960ee0663", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820a4bb6-f284-4e9c-9e1f-3b59defe749e", "sighting_of_ref": "indicator--4a668cb1-5112-472d-8d7e-a98bbfa965f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2da552d-21da-45d3-b0a6-0a9d0e5c2a5d", "sighting_of_ref": "indicator--eba36927-8c74-40bb-a24b-45e706a54820", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6674f9-dcd4-4927-9d14-03974ecf7fc3", "sighting_of_ref": "indicator--69e864f5-0c36-416c-88ba-e9141719d35f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe5bb5b-5db0-4074-95d9-68b754215375", "sighting_of_ref": "indicator--8915d884-8fd4-4ba5-8693-2800ed842315", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4876562d-4020-44f4-98b0-c417616ab1f8", "sighting_of_ref": "indicator--28a918cd-3e56-47ec-a705-09815ef0cb30", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674b9f83-ae08-439b-bb56-d6d3235eb6dc", "sighting_of_ref": "indicator--3c81c41f-d340-4e01-a4f2-aaf61a4d62b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ab4a40-289b-4a0d-b780-9d53ce34102e", "sighting_of_ref": "indicator--88fe772c-ba4e-44a1-81b3-628f6b3507bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf2850-af82-47cc-a72a-59528fa9f6bc", "sighting_of_ref": "indicator--6809d978-a458-4d2e-b5d5-da46137d6a2d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c8ae3a-0ea5-45a8-8af0-cde329934af6", "sighting_of_ref": "indicator--b262de9f-36a6-4cb8-90a9-d74d35f6f766", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f83f6-534f-4b4a-aa72-cfd91a47df55", "sighting_of_ref": "indicator--c1425f8e-06a4-44d4-9f37-bdbbc89a3c57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70eeafc-51be-4522-9b89-9f60fd8c286b", "sighting_of_ref": "indicator--40a5a9a2-0e18-433b-bdca-2347891ed4c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3b3c8b-1e9b-4b28-9a0c-228accbf00ce", "sighting_of_ref": "indicator--a0f3a30f-d08b-41f4-940d-896b44f46858", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db911f4-28f0-4a5f-9a97-f40d43888674", "sighting_of_ref": "indicator--d10d3764-74f2-49de-aac2-28f8f3f0addf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4dd3a3-5720-47e1-90eb-57cd08b9f9fd", "sighting_of_ref": "indicator--df6afff7-b0c4-489b-af0c-a7a2f57b9ed5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da882c7-31be-4aae-8fa9-526ac10e5198", "sighting_of_ref": "indicator--6b75a729-c832-4ea7-90c2-d429ef527bf6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dfa335-52c5-4823-ae5c-2c08eadc6604", "sighting_of_ref": "indicator--cf044a59-66fa-428f-bf15-9eba3dd5d2f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13db5ca5-5b4f-4a39-943a-b8bf6a13e1d0", "sighting_of_ref": "indicator--e121ccde-bf4a-4c18-bd31-1b55961385dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01538b3-fa24-464a-b0db-11e9ea18267b", "sighting_of_ref": "indicator--116450ad-7ef0-46f3-883f-8535f3d9e579", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a791ba0-5f4a-42d6-a273-aa34e2ea9510", "sighting_of_ref": "indicator--fa2c6eba-7fc7-4e0a-b5b4-546b4cdf4667", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b75635-c8d7-45da-a803-2ce49bc404d5", "sighting_of_ref": "indicator--33b34edf-47ed-4943-8374-399b753af209", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098ac787-e227-4b4f-bccf-216e09752fc3", "sighting_of_ref": "indicator--c93e91ae-e00d-443d-b8e8-7e9d98caccd2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fb5b2f-0281-4a75-a46e-04e46808d43a", "sighting_of_ref": "indicator--4ca88eb5-dfa5-4f90-98e8-451495c128cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15981f21-8a8f-469b-996a-9a972ee12b0b", "sighting_of_ref": "indicator--45b91bb5-e0a7-41e3-959a-5c11aa7fd507", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007f61ba-3621-431d-a557-2c805fb3cd16", "sighting_of_ref": "indicator--3133bd5f-f632-426a-8946-d3dd8b14d8ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f3cbc-8e46-40a3-af98-18c7419629e4", "sighting_of_ref": "indicator--769c2321-da18-4e29-b884-0171d08e64c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc240e3-9a10-4b73-837a-3ceb4ac38382", "sighting_of_ref": "indicator--8d1404fc-6cd3-4f77-9e9c-8334083558e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eb0207-a802-452e-b434-1a028dcb80c8", "sighting_of_ref": "indicator--981f85a5-c3b9-41c8-a3e6-cc29291da625", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7b59af-da1e-47e9-aac1-f5d0b8dd35f8", "sighting_of_ref": "indicator--951f2160-59d7-4008-bb97-b6087a6cbfc2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516117a6-b7de-4519-882f-98c2f63959ce", "sighting_of_ref": "indicator--f1d4983c-9bd9-4057-957a-d1f2f8bf2748", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4139d963-9224-4ed3-a6b3-cc59181be427", "sighting_of_ref": "indicator--f1e379a8-d566-459f-ac29-338f8bb8e99c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867a67d3-19a8-4b99-b7bb-aaf7e75e73f4", "sighting_of_ref": "indicator--0caf5f58-ebdd-4747-83c4-3c005938dbf2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b467024-f3f1-40a0-8248-ce4d2110afc7", "sighting_of_ref": "indicator--972d7c85-4818-4ba4-baf8-1e0c47d7cff3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58284a6-cb79-4fe4-9a9d-16d27c4b227f", "sighting_of_ref": "indicator--9de70e4e-f37a-43a8-888e-3532c36c6145", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6475f5d-2bbd-439b-a79b-1fb14655fb2a", "sighting_of_ref": "indicator--c5e32dc4-a07d-483b-9301-b494501bdfc6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edc0ba5-2588-44ff-9659-5b0f13abe633", "sighting_of_ref": "indicator--6ce27cb1-6ce0-44c7-a043-37ccc6842afe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbb0188-e1a6-4891-a811-3e115b9691a9", "sighting_of_ref": "indicator--1e47b6cb-becb-43d5-893d-b9477489cf0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ee153b-7694-41b7-9b06-360386f0a871", "sighting_of_ref": "indicator--5cfe2ceb-b28d-4717-a2f6-95005acc0cbd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2c1d7a-96e5-43ff-8f1a-e22deead2ac2", "sighting_of_ref": "indicator--e7e657ff-8e04-485b-ba3b-ac59a215b8df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf094f8-c03d-4340-bb12-9d050486154c", "sighting_of_ref": "indicator--d7429c65-48e7-4acc-b675-94401df72997", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9c7cce-23ee-45a8-b9b0-84b0b9ce4946", "sighting_of_ref": "indicator--fe3aac41-488b-45c1-878d-a864b6ba4056", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17cc8ce-c2f6-4d20-9b6d-8b7f776f259c", "sighting_of_ref": "indicator--327107cb-6741-45dc-bff9-710dc88d3701", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e50bc6-6c31-42c2-8af2-4d73ee18e7cb", "sighting_of_ref": "indicator--ed0a3edb-4319-481c-864a-c14e1518bc73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47041bb1-dd2a-494b-a028-e1b6cfe63ad3", "sighting_of_ref": "indicator--1c5eab79-49ad-4ea9-8de2-e91b65e51345", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2434920a-c7a1-4a8f-99b1-adb10cc9ecb9", "sighting_of_ref": "indicator--7a6df98e-8687-4dfc-a493-19d03fadd12b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395ac54b-9c9d-4ad2-9078-f035849f6a2f", "sighting_of_ref": "indicator--be6b22da-a9bb-404d-8e3f-cb8359415ff1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481624c8-40dd-4b7c-8dae-084a4d7f549b", "sighting_of_ref": "indicator--b59c0827-3584-4da8-837a-b6fc470af458", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75241c92-5a0f-40be-9ec3-5d66131b828d", "sighting_of_ref": "indicator--b9ac7189-5ba2-416a-a32b-4a0c6d459713", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4a483a-e6db-4b55-9830-4f9c2590e560", "sighting_of_ref": "indicator--22f9db49-38b7-4549-b6c7-293f034314f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ae3fec-8786-402a-b8ef-16c824071310", "sighting_of_ref": "indicator--c90175fc-370c-4819-82bd-490ebeb0bf63", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3087b4fd-7be1-47d2-9739-92c3c38b6a3b", "sighting_of_ref": "indicator--00768a94-1bb9-41fa-ae40-f0719b6dd75a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b03024-b948-4e3f-b3a4-b5c3c29d984e", "sighting_of_ref": "indicator--8146aca4-2d84-4296-a872-9d9f8424f8c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa65efa2-e495-4734-8876-3fab17f1b5f7", "sighting_of_ref": "indicator--e2902a85-e3c2-41e5-ad55-7d3003458b24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551aac4a-29e6-4012-ba07-44329113f066", "sighting_of_ref": "indicator--aa0dee3c-42cc-44db-8afb-a10747935e03", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdb3f8a-52d6-413f-9372-50624166d37c", "sighting_of_ref": "indicator--cb0da0c1-be0f-4b44-8c09-837c6f700358", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8dc345-6765-4e7d-b0d6-6b980cac9f3e", "sighting_of_ref": "indicator--bda1cc16-203b-41ca-9fd8-ac59fd2a6f6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cb1d7c-32cc-4c3e-9e30-dd0458dd3892", "sighting_of_ref": "indicator--c84d2bef-3921-4069-96b4-420a4b8d464d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b4e621-5c21-43dc-b6fb-846f2aa7bf5b", "sighting_of_ref": "indicator--0dc1b380-3bca-4453-97f2-7fd47265464a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e24802-b0b2-493c-bb92-ec1ebe59e63e", "sighting_of_ref": "indicator--ec271ce3-c66c-41a7-9b7a-7ad5075bd926", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b09478-b340-41af-a84e-635b838fb7f6", "sighting_of_ref": "indicator--9ca3dc50-2f31-42e8-9a23-440d07ebeed5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be21c1d-1376-44ae-896b-8e4e80f99013", "sighting_of_ref": "indicator--526792bd-9e03-4129-b3a7-1f7165483494", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6d6121-f3eb-4478-bd4a-b4012e2dc5fd", "sighting_of_ref": "indicator--5f2d94ca-2f3e-4898-b515-7a9ed911b4cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055e8f15-8cda-449b-830d-8f640bf71052", "sighting_of_ref": "indicator--b335d487-575d-4c47-920d-115b6a4c452b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54221812-18cc-4840-834c-76e1d716994d", "sighting_of_ref": "indicator--c43d01f8-62f2-4cbe-b9da-f5e5197f9ebd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d7132c-5c43-4d90-a9b8-e42cee4a3235", "sighting_of_ref": "indicator--061dd6d8-e56a-47f8-b61d-952836459a37", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20b56d3-7662-446c-bf47-823dab8398c8", "sighting_of_ref": "indicator--8658a168-dd4a-495d-ab04-61ecf7a658f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3025fdc8-be83-435a-a576-4633f32dd644", "sighting_of_ref": "indicator--333aad3e-eb9a-4bbf-9f46-7cb86985062b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a78936-1c5b-46ec-a04f-af3fb4edad6e", "sighting_of_ref": "indicator--111564d3-6c4b-4dda-895e-10ccc555e23f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f45c1da-8e55-4ab2-8037-12fbeb3736ae", "sighting_of_ref": "indicator--6f5743ac-ffe5-4ed8-a624-c75a0afa8ad1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c14dc8-c1e5-482a-9e1a-18d5a87769a0", "sighting_of_ref": "indicator--74532275-d661-4b32-960d-ec92f1298702", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279d9353-77c6-493e-b105-a6d276b45965", "sighting_of_ref": "indicator--04a4620e-ced5-4d1e-85ce-fda0f4a558ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96f67e9-7aaf-4cd1-8c69-48cb0bd0eb62", "sighting_of_ref": "indicator--c22afead-eebe-46e8-bdd1-1a771a7691ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abdb916-c003-4a70-8815-b0f22667d6e1", "sighting_of_ref": "indicator--251464ce-cfbb-49c1-8c52-750e55e485ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf60cf7-b16c-48f0-a242-8dc235d6b231", "sighting_of_ref": "indicator--c0eb28c1-4f2f-46b3-b027-7d4b071aa15c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29d5b51-3a21-426f-a512-b0da50c32e4b", "sighting_of_ref": "indicator--0f524aa4-df25-4a39-bcd9-28e3aec2c756", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb782b35-f5cf-4c16-8258-5333be3ded02", "sighting_of_ref": "indicator--283c352b-19ed-455f-93f3-a6e5670b3e99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a28b6-c094-4613-b458-6e46d0f6eb88", "sighting_of_ref": "indicator--3f12b25d-6d38-46ae-b2f9-fbfd3c03cedf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113448b1-40f2-4582-89d5-804aeb225373", "sighting_of_ref": "indicator--2414fc90-738a-4df5-9d1b-d68bdaf2f1a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237f8e12-38d5-4b7c-9561-c2abce2d2c38", "sighting_of_ref": "indicator--41141c5f-2750-4ea3-b9f7-b422195f03d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1c2302-7f49-4818-9b94-471bfc7bcbe2", "sighting_of_ref": "indicator--cd5d3a3d-752d-4f7c-8670-7b0b9e65f8dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd901ae-3d98-418a-9c0e-2d82efcd2e7b", "sighting_of_ref": "indicator--1290e72e-f601-40ce-beec-8b967c6f97b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06171fd7-5eeb-4460-85e5-bf1785688507", "sighting_of_ref": "indicator--bef0110b-7868-4faf-8ad8-bad74287ec49", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b1193-1acd-4e66-ae4c-3e28939ef0f4", "sighting_of_ref": "indicator--b1984155-9b0c-4f7d-84b8-9c9420341c29", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe7a7d9-cf50-45a7-90eb-663b387ae555", "sighting_of_ref": "indicator--2e235424-5a68-4ba4-ba00-5e083346bd81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48a12a8-6939-4f9f-a9d3-9626129d6cfc", "sighting_of_ref": "indicator--6655d268-4218-4bcc-98b3-d8471249c43e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3554a4d-9f2f-455a-8954-3b75a018024f", "sighting_of_ref": "indicator--b905006e-dd05-45ad-9b3f-5a0b30053d71", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e0ac2-8a36-49eb-8caf-e7f0d9fbf829", "sighting_of_ref": "indicator--8900e563-963d-4079-81bc-fda53cc75feb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8018dd46-f6d6-46ef-8a08-43042bca091b", "sighting_of_ref": "indicator--911e0314-c6b2-46b1-8324-fffee38c084a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc93bf57-5afd-4e4b-be8a-8ecc6a705027", "sighting_of_ref": "indicator--96fb885c-55e6-407b-ac29-767057ca430c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c96872-60b7-4a12-9319-7237d3ef8968", "sighting_of_ref": "indicator--6d16302f-a5aa-4e64-980c-943aa19746cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323f0daa-429c-425b-b963-7b96c78ef280", "sighting_of_ref": "indicator--40e53159-f8a2-4c48-9666-68b39236c43b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c637f94-a76d-4002-bdb6-3c5eabc425cc", "sighting_of_ref": "indicator--b461f93d-7a52-4693-83c5-088257425ce0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1dfa91-8b4d-4c4e-8e6f-21a36fb268ab", "sighting_of_ref": "indicator--563185c3-387d-4298-bc41-6b8b81640b24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20dcbb3-9ad3-4731-a039-f170e0128857", "sighting_of_ref": "indicator--139776f2-2a1a-4450-9a8b-c8c59c93189b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3f42b4-58da-4c9f-af58-c786bc238d04", "sighting_of_ref": "indicator--54fe9e17-8d02-4bb8-a0c7-b0e31b5a19e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2a5765-189d-4493-b4c4-3d4a3f76ecf3", "sighting_of_ref": "indicator--28aa22f0-928f-49d1-81b8-a7f1c59ffba3", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bbbd0a-3649-44f4-a007-d9a6b4991041", "sighting_of_ref": "indicator--d4620024-82b9-408e-9b66-536cb3e1e049", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab81ceb-fd7d-4d76-b96a-a1758a7b70c7", "sighting_of_ref": "indicator--cfed08a2-dc37-4908-a3ba-2ae07ef78bf9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3690bf9d-830f-434e-8be6-ba06838caf5e", "sighting_of_ref": "indicator--93ca4d82-5217-488c-911a-33fa1dc9ca2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf00a230-68bc-429b-b550-502f23470ab9", "sighting_of_ref": "indicator--b0dd02ae-654d-44eb-b784-d936b3e59d85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b554cd-41e2-4d00-bb14-f41a26364c91", "sighting_of_ref": "indicator--15ba0a15-59d7-4ab7-99ea-58b562850c78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5599765-b7dc-4257-a164-821e1c1f72b1", "sighting_of_ref": "indicator--e6ab6d96-b3cc-418b-8424-2cf2ef07b10a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bea6f63-3218-4776-80f1-1659b7ba2d6a", "sighting_of_ref": "indicator--db748e13-3208-464f-963d-6b23f53acd82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c69bef-b47d-4bd8-b8cd-486497193122", "sighting_of_ref": "indicator--e9d955a7-8009-41f9-b362-a0baaa20f776", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2453ac-6484-47ee-85ae-a2d5b22a71a7", "sighting_of_ref": "indicator--43e43e5a-7168-4421-9027-eec7e106f139", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa976f3-31cd-4690-8a11-726411565877", "sighting_of_ref": "indicator--9da3b750-fe34-4611-8ed1-66f656b4f56d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820dfdcc-322e-4bc5-be32-10a2b8f62475", "sighting_of_ref": "indicator--6d103f21-d483-4a92-9eea-241579f54f7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1e4725-b6b8-455f-aa06-ffb5d78caebc", "sighting_of_ref": "indicator--6f7b366c-b7f3-4067-8288-a91b0f28bb7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbca0fa7-651f-448c-8952-d8438b4b42b4", "sighting_of_ref": "indicator--ed25e3ad-e91c-4cbe-a1a6-5bcaf19c14cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6810c9-ed7e-4852-b9c0-7f3c296c37c3", "sighting_of_ref": "indicator--8fed7b5a-9de7-431f-aba3-5d13fb0a1867", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6f6420-79b7-4b4f-a61a-d40c1e0e6447", "sighting_of_ref": "indicator--10938e83-3624-4402-9655-fd0ea690cb4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5145fe34-a57b-4333-a72a-604087ee6a45", "sighting_of_ref": "indicator--7874dcb3-b550-4462-a4e5-3dcdc016e476", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9590e9-aec5-4600-8399-67118fc9d176", "sighting_of_ref": "indicator--9c4f7ee7-5611-4dc2-8a28-3c81e0687571", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03710b8a-5bb8-4432-ada6-c0fa7b8bc1a2", "sighting_of_ref": "indicator--9be4b6d3-ee3b-435d-9320-48c32fed22f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260a8567-d4d7-4b92-83b2-4576a5964bfa", "sighting_of_ref": "indicator--f1828e08-e680-4a73-beb8-c36d4fb4b845", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5445fd93-f1a2-4a42-b9b8-369a84e814f0", "sighting_of_ref": "indicator--3232201c-bc2b-468d-9423-b9c398a00e12", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6f6cfc-4768-471b-9f4a-ab10aef0b6d9", "sighting_of_ref": "indicator--d7448bf2-4473-4c2a-8c86-e6d79c061636", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639b7381-e88f-42be-9c8a-ad60ad2477a3", "sighting_of_ref": "indicator--f93847d7-c85c-4f1e-a3d5-83fecea27cb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900cfb8e-6078-451c-a838-345e10b3ea3b", "sighting_of_ref": "indicator--bce46c90-2302-422d-90cf-b8a48de2d0ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a4a0be-b86a-4530-8f6e-27ad09ef2728", "sighting_of_ref": "indicator--307affda-690b-4dc8-8686-399c0a2e751d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849586ff-a850-4e5c-bacb-d670b6717855", "sighting_of_ref": "indicator--cd86e6c3-a952-4d3e-b2b8-0caee43fcfb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751f8b36-d870-432b-962b-cecee1e0eb72", "sighting_of_ref": "indicator--8af1e20f-e0d2-4f5a-ae06-b5a9b4e92e36", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f57060-69b5-420c-a9b4-ef685cf767bc", "sighting_of_ref": "indicator--b1791279-715f-457f-8f1e-1b0e5b4d898d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32011a1-78f0-4e9d-82ca-2030db5d137b", "sighting_of_ref": "indicator--758f7914-2d51-40ee-b1cc-7c0f535f65ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e3c26f-2516-4e3b-814b-5ab8c848679d", "sighting_of_ref": "indicator--61b3c359-0cd9-46bf-bf3e-4763661b85c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0accdd1e-a43e-4d22-9e0d-aad618deff61", "sighting_of_ref": "indicator--717ea43f-2d8d-4929-b215-81e2b646f95b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3278cbc1-defa-4e39-98d0-05c8838a6288", "sighting_of_ref": "indicator--851ef53f-8c7f-432a-8e7b-5b470a29ed41", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135a2279-8132-4b58-9e9a-4e3bc6619608", "sighting_of_ref": "indicator--cd5f9b9f-88c0-42e4-a54f-3a6f313fdb47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8239fb2c-f194-46a6-a254-0e10d015448c", "sighting_of_ref": "indicator--0a92a9c3-97b6-449f-8122-cc823f44a819", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9643b1-9978-43a0-9581-bd987f9d1c7d", "sighting_of_ref": "indicator--4c78ad84-7dca-4de4-a392-a098a3148402", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3d00a1-531f-481e-937c-ddadeda513a1", "sighting_of_ref": "indicator--3c01c9b3-0278-47ee-98d0-26a946ca1f9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13455aa6-503f-4bbd-a24d-188daadeb0d5", "sighting_of_ref": "indicator--e996e781-0e8b-445b-a3d2-729c31dc31d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c65f54-4643-4abb-a986-5542ed55c503", "sighting_of_ref": "indicator--883a2c10-0603-473d-86d8-5b19ba09de14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dc5924-35a8-4a30-98ad-68e9f103273d", "sighting_of_ref": "indicator--a889721e-538d-4b77-89dc-ee938d49ca4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bdb4a9-2aef-408f-bb19-e1edf036a4dc", "sighting_of_ref": "indicator--a53cdbbd-ba7b-4e5d-bb1d-f578344af2a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cf7c24-6ff9-4498-9970-98a04a958cdb", "sighting_of_ref": "indicator--41bdd5aa-b727-41fc-b881-38941f0cbfe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a22c0a8-dcb2-4068-a80e-4bda8c0fd690", "sighting_of_ref": "indicator--cae677eb-f401-4404-8472-2543e447e308", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287b36f2-92e1-42f1-a2fc-098a90d5bde7", "sighting_of_ref": "indicator--2d56ce6b-34f9-4a34-acc1-32b74cc44000", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb113d-e375-4f56-bbb3-08cddf139257", "sighting_of_ref": "indicator--3f9b7823-a687-4d0b-a512-e18d53073f2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb90a396-ac0b-4dbe-9680-e5b615d6eee8", "sighting_of_ref": "indicator--0d0d4766-57e6-4096-ab71-725acf28bd2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4825bb1b-654c-4ca3-bcfc-745ca7e6685f", "sighting_of_ref": "indicator--3ed369cc-8473-4753-b4cb-31288c4eb237", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b192152d-0e0d-495c-9725-5b80c9c8e49f", "sighting_of_ref": "indicator--6f6a5757-7560-4aec-8a96-41a01f469acf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d23c23-b7e7-4624-a5f4-a5f9d598b93f", "sighting_of_ref": "indicator--39a61e60-9295-49d1-9435-2bcbe2f380ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27be913d-1b15-4d26-8044-90fab95b3128", "sighting_of_ref": "indicator--5270b03a-c656-4e3b-9d63-4f0154b59817", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57e9e7f-7cab-4619-9dba-1a842113fa97", "sighting_of_ref": "indicator--bb5db3cb-bd88-4f07-b19b-e84e9d311bc4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbda619-6b4d-4ee7-912d-fa35081012cc", "sighting_of_ref": "indicator--db54a7e9-6694-417a-b0b5-776406f28488", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87860313-7caf-4eff-b0c8-8c07a3277371", "sighting_of_ref": "indicator--d1578bdd-18f6-4378-b335-4766f458d6e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e077773-da41-4d16-b75b-d74196cc5804", "sighting_of_ref": "indicator--a586494f-6347-43e7-af91-f573b68fcc65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce352d7-cb18-4a0e-9413-473f9d43102b", "sighting_of_ref": "indicator--7b51b2e1-019f-4982-98b4-0a64d19b6af6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feb4bd7-d0e8-4ca1-87ea-97d05eb13ad6", "sighting_of_ref": "indicator--1fec4be7-a3b3-4efe-a5fb-d8fbb91f55b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb80e2b-493c-435c-beff-db209371a8e5", "sighting_of_ref": "indicator--7360b663-d55e-4d5e-8054-985bdce0937f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71963117-8be6-4403-8858-efd2f9fc73d9", "sighting_of_ref": "indicator--a4c78f19-cacc-470a-8536-d344a6e1b437", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c731286c-1ead-4d23-9e45-5b0939f4b2f3", "sighting_of_ref": "indicator--13ca7a84-0e4d-4433-b122-76425dd4f954", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492e2d46-5a97-4405-8027-78c4a858016c", "sighting_of_ref": "indicator--601f238c-630b-4e54-bd4d-c65db0509319", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93cd8c6-e4a6-4ce1-87c1-c748eb693cd4", "sighting_of_ref": "indicator--d137df40-6bc3-40d3-aa6b-883a7a627fcc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82cca76-539f-45ce-b65d-4b17ce5b3133", "sighting_of_ref": "indicator--069853ad-8a01-49cb-a9ee-2c27b036edd6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5e7631-fd26-402b-a48b-97c52f67e2d6", "sighting_of_ref": "indicator--0d745c5a-526c-4554-a238-1864883a9e1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f5220d-7b84-4ff9-b3c0-9b558d2c5128", "sighting_of_ref": "indicator--924d4819-6fed-450f-a391-a4ff57c0ca58", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61687a55-30d7-4809-ae6c-a6a8aba9df3d", "sighting_of_ref": "indicator--3cb6b841-b708-46a8-991f-876ca3000b8d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b545cd5-993a-4cdc-af62-2610ba95e1c1", "sighting_of_ref": "indicator--87eadca8-90ce-4088-bbac-b71a20aa804e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c245bb-3ca4-4b8b-891f-9c4c98cda759", "sighting_of_ref": "indicator--d3dc2578-fe40-475f-ad1d-c96fb5e0d8ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b25042-97ff-4ab2-825a-ba811621f0d3", "sighting_of_ref": "indicator--1667c76d-eee8-4133-80aa-f0fa52206eda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe11b3b-1f2b-41a8-9d42-597a14330dcd", "sighting_of_ref": "indicator--6065efb8-7e85-4e68-b59b-400fa76e5d4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6766700c-a653-40d5-9a6e-72c5b1a2f36d", "sighting_of_ref": "indicator--9a6d1eb3-c4ee-4e8b-8d52-8f037284453a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdc35e4-766d-4cf9-827d-2910e76833d6", "sighting_of_ref": "indicator--63df1a37-b5d6-445b-bd4c-42173f206b3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff990107-65a1-4b95-9bf4-b60f5645e418", "sighting_of_ref": "indicator--0a03d561-f3dd-4ff3-8e30-61689ebcc225", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00982436-7b74-4189-8f0a-db9ba143eec8", "sighting_of_ref": "indicator--2cbc56de-f8a2-4766-92df-e774fe2aecb6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc47182-64bb-4c83-ab0d-05d1a59d0ba6", "sighting_of_ref": "indicator--c0321e1a-c9da-4cd7-adfc-cf4be55ed64a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44a08ad-fe34-48a0-9447-9923aa8d4458", "sighting_of_ref": "indicator--30506fb0-2a2c-479f-ac27-abd4973c9597", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8adf91-6638-4a7a-a045-380f120c8298", "sighting_of_ref": "indicator--87ee0f97-8c2b-4c9d-a0f2-28a34eaa0ca5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b56f8e-1fe2-4df9-b957-45e1aebafe71", "sighting_of_ref": "indicator--73256f58-3500-450d-a3f9-938742b8934a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919adeb0-d071-48b3-a854-62cadcb1c0e1", "sighting_of_ref": "indicator--0ed97821-3c2e-4cb1-b078-8fd0c2648439", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517b167f-b7a8-4069-b88f-309e72d4208b", "sighting_of_ref": "indicator--a7ab60c6-f58e-4ee8-871d-51bba81dc804", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3481fb65-0cf5-42bf-aaf2-734285b1e3ae", "sighting_of_ref": "indicator--5b8efa49-a643-40ad-bfd3-1964d56d7260", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d0709f-abc0-4082-9fe2-0a3753753d6d", "sighting_of_ref": "indicator--6cc4e12c-0bad-4cc3-a3cb-b398ebbc5b82", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ed82a9-15df-4901-918c-6d19f03c03f9", "sighting_of_ref": "indicator--508bacdd-6c8f-4a5f-9ee7-3998594a3d3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdda98e6-4acc-4729-91f5-da4755268668", "sighting_of_ref": "indicator--218420a8-cfd2-44f1-a009-51075f3067fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b07093-4280-4b13-8f94-57caa6c3cd45", "sighting_of_ref": "indicator--3a896d56-600e-4264-b9a8-19dafb994713", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddad4c1-a73d-4f71-909b-3bfaee4518cd", "sighting_of_ref": "indicator--5d3a7e7f-7466-4bde-91ec-8bd3e732287f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7e5ca3-af26-4bae-8197-69f68d453cce", "sighting_of_ref": "indicator--acea9b19-45c7-473b-a26b-a0049478a7d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afba0cd5-6be2-4aeb-824e-3b92dfd7f5f7", "sighting_of_ref": "indicator--8cd7715a-08d6-4752-a9cc-058781fe02cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6743a598-7730-44d5-87fd-aeeb7d5799ec", "sighting_of_ref": "indicator--99921183-59f5-459f-aa43-9231201df3b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e23bb1-ad25-4eb4-9662-420b0dec3115", "sighting_of_ref": "indicator--e1194fd9-81a8-408a-bb4a-5858e7385b67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381386bb-2b3c-4756-87df-d0b6266f9f55", "sighting_of_ref": "indicator--d1dc3880-bff2-441e-8219-6b3e2c4d07de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1573b1-5399-47f0-9f96-25de08b1a93c", "sighting_of_ref": "indicator--2054d253-bbe7-4ca0-a61f-4904b8a0af22", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d68b987-edfe-4064-8501-84c3b8dc0ae0", "sighting_of_ref": "indicator--398384ca-96cf-46ea-9ae7-7dae61e1e344", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c4135b-9f11-4b0d-9d43-d3c5f616ce6c", "sighting_of_ref": "indicator--4877d205-fbcf-4c13-9e9b-c5771f0659f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ef1d66-6f70-40a0-ba7c-57db44df1e5a", "sighting_of_ref": "indicator--cfd5919c-3ea4-4e9d-9da8-95366812cfbd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142c9248-f4d0-4035-a665-a315152e676d", "sighting_of_ref": "indicator--b0dc4d25-f327-47a8-8375-cf46fa467d97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d5755e-a88a-49e4-a8f6-d3a0621fba19", "sighting_of_ref": "indicator--96604d19-13b1-480e-ade7-7db12565b921", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e191d596-775d-4afc-bae7-ebdef378f2b0", "sighting_of_ref": "indicator--2a97ab88-93e7-431e-afd3-9ff8dd1a0569", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fdc296-53b3-4fef-b08a-aebe1944ac7a", "sighting_of_ref": "indicator--56318b4c-6a56-467e-9d8e-b5e201eaf162", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99220eef-c875-437e-8b99-cd63f1360971", "sighting_of_ref": "indicator--12f03c25-dd7c-4e0d-a2aa-2dca2713646e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38320e5c-cb51-4bca-8bda-dc3d58250113", "sighting_of_ref": "indicator--e25603cb-b178-40e3-8bed-52c21c1f2736", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af96e765-e006-4c5f-be44-96db9fd7432e", "sighting_of_ref": "indicator--c0ea4f65-36bf-4b91-9133-a7f254160134", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045ee0a0-f494-4bbb-8942-14d847b5d6ce", "sighting_of_ref": "indicator--5693beb4-b5a9-4d4f-86e5-714477e145b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e896dee6-f03e-4aac-a98e-b16a3c9836f5", "sighting_of_ref": "indicator--d412e728-cf26-440f-a890-f14107831286", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1695dd3d-04c5-4930-86a6-b28d0e1851f5", "sighting_of_ref": "indicator--00310761-c96f-4464-894e-1001e3cc828c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e20db2-e759-4aa1-858d-7c4182f9141b", "sighting_of_ref": "indicator--a82e495f-21f3-4c6d-8ddf-89dc7f815c0e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28bd88a-ad31-44d5-8a88-091c23239f4b", "sighting_of_ref": "indicator--b7880d36-09ac-4c10-a900-e216a9b1a180", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000be2bf-7942-46c8-ab32-b8082eb44a60", "sighting_of_ref": "indicator--e1b78f08-916e-4633-9b37-8ed97ee46315", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e01aaa-ddad-4f08-8c6e-47f48a99f3ab", "sighting_of_ref": "indicator--29617e5a-3b3a-4508-b3dc-58d36452b741", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0303279d-081f-46a3-9127-4dbd65585a15", "sighting_of_ref": "indicator--c9c9a7e8-6d8c-46d3-b953-6498830bccda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0295aff0-c716-4ff5-aa94-57c7ffbb0e11", "sighting_of_ref": "indicator--c6789a14-bc6e-4c52-9f34-24076ad35c81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5a26ce-ce14-46c7-b10f-1895e6c9a851", "sighting_of_ref": "indicator--da9c26a7-93ee-4da2-ace0-a8ad119dfa9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dc11c4-f692-4aa1-b10e-87a58b1be404", "sighting_of_ref": "indicator--daa1a140-0846-4650-9420-edd209566284", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2de2e8-6026-48e6-bd43-eebcb1d0db87", "sighting_of_ref": "indicator--9072491d-70e6-4a5d-85b9-b405d76d8a11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc650e78-73a6-4434-90eb-2fd0630b4d1d", "sighting_of_ref": "indicator--48db4452-d8b7-4aba-9954-014bd7b556c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a621d6e3-2060-49aa-b0aa-0e1e657571b7", "sighting_of_ref": "indicator--5c4dd6fc-8388-411b-bede-ea42fd6940dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3863c0-6a69-4df1-8a55-dc5a65121874", "sighting_of_ref": "indicator--47e19953-dc87-47c5-afd7-0f5a214c3d31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dabb66-2664-4735-b003-1b907f3f871d", "sighting_of_ref": "indicator--a7f07dac-63a3-48fa-95e1-98e2697ecd2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ed3171-c67d-48ea-8c83-673f6082b602", "sighting_of_ref": "indicator--2499846b-21f8-4a6b-8ce6-746b7a2291ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe073123-5580-4456-ac87-53cb21b58b74", "sighting_of_ref": "indicator--2f15cc54-326d-46fd-86d0-d93df97faad5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9278a5f2-7076-4049-ac1e-104e5493e36f", "sighting_of_ref": "indicator--9fa6711a-65b6-4f31-a1e6-0f1c9278a7b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20bd659-d9b3-4ec8-89e7-371605fbb635", "sighting_of_ref": "indicator--df52c0f9-6b7b-47e3-9281-40bce1ce62db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8631e9cd-b41b-452a-a07e-98c9d4431e35", "sighting_of_ref": "indicator--63150c56-2229-4a79-b0c0-8a6a3a3e150e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70591b0c-9061-4679-be94-45776bd98140", "sighting_of_ref": "indicator--492cc25c-5106-4e36-ba0b-4568380add19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c70b3-dea0-409c-aa38-6b2de7df2b92", "sighting_of_ref": "indicator--225cd763-914c-4141-ac8b-92a69bef0d11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4149172f-1a94-4e80-bed6-a115b3880d87", "sighting_of_ref": "indicator--adcbb87f-933f-4bf4-b311-9b1fed8b740e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e24a79f-a688-4a1b-8d91-a709805490a8", "sighting_of_ref": "indicator--3036b52e-0fe3-4807-a6ad-1ff495673017", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d252d-ba02-4921-b488-e553f1c162ac", "sighting_of_ref": "indicator--8bb02dff-9ad4-4e8f-807b-53718471d879", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344ff10a-f766-455a-b949-83209cf99bd1", "sighting_of_ref": "indicator--bfd45916-9738-4a89-8d83-f42a7fbb20f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ad68b-e95b-492a-8f57-c6643e7b06d5", "sighting_of_ref": "indicator--ed1d5e2b-0246-4185-83e8-e10e0539e328", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb141a9-798f-4273-bbef-69033b5d8498", "sighting_of_ref": "indicator--84a75e74-a465-45bf-8365-bb3e977bbaf8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234a07ad-b3a2-4a72-8074-412a9a14d51f", "sighting_of_ref": "indicator--9556557d-2c2d-4105-ac4c-d6a8c3315163", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0eb828-80f0-4f79-9537-14e0da72686f", "sighting_of_ref": "indicator--ff53d4d8-9f87-41a2-93c5-cd5f8cd8ca80", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcd2f3d-44cf-42b4-8a7e-4ae5c57759f6", "sighting_of_ref": "indicator--2782519a-f853-4e72-931f-8ee215874bea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ef4bfa-e59b-4897-97e8-918b5704e193", "sighting_of_ref": "indicator--3d158249-06af-46d0-b43e-7017124f2b56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abebfece-e48e-460e-b237-45e36cad344f", "sighting_of_ref": "indicator--3cf99d3d-39cf-492f-a308-f9f54d01892c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388be162-9649-4452-96a7-823d27b904c1", "sighting_of_ref": "indicator--fab15798-0f58-4d62-abe0-684bc27932a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a09ca5-842d-40ff-a92d-c8092e2992a2", "sighting_of_ref": "indicator--25b07273-bb84-4087-8d36-224389e63996", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9e96b5-ea8c-40d2-99e5-1fa57657ee40", "sighting_of_ref": "indicator--09b1e323-b94a-445f-b8f6-0bf253fc4466", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6463c9-6dcb-48bb-aeb6-dfb14ee5d56f", "sighting_of_ref": "indicator--85ee694f-972e-4de6-9c10-8a492ca5b228", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b443553-3392-488d-9b4b-15c1aaefc12e", "sighting_of_ref": "indicator--a7aaac99-601a-42a6-a3d3-5fa38e0c7412", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140168b6-7851-4702-a73c-87911e654213", "sighting_of_ref": "indicator--97dc0188-2f73-4283-8be6-9dbec7522323", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db62cc06-63de-487a-86c7-36c407f9d9d3", "sighting_of_ref": "indicator--5867bbb1-df3f-4004-9580-eecbb40c2e8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a597edb-5159-4813-a1f5-3be68ed48500", "sighting_of_ref": "indicator--3b42c437-088a-42be-9935-6be0487f4235", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49434d9b-eba0-4bb7-bf6b-3bdd3d62aa3f", "sighting_of_ref": "indicator--70899a53-e284-4e68-8887-702749c47071", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb6fce2-dfec-4cfc-a018-2c7a52a47d41", "sighting_of_ref": "indicator--16113709-0fec-4fec-9d86-4e2b667f06d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d492f2a3-8425-41dd-9c8c-37bbf5d83e9e", "sighting_of_ref": "indicator--63297e0d-f823-491a-80f6-46b137e431bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc26dc4-1323-4fbb-8b71-9178456fc50a", "sighting_of_ref": "indicator--e9b817c7-fdde-41ae-8b61-2922fb47f473", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f21ec3-f24d-43ff-85c1-c8b5a75fce99", "sighting_of_ref": "indicator--15662f56-7a90-4089-a96b-a21b8ab4a65b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cd5aa8-6b8e-4209-b092-844b903abd52", "sighting_of_ref": "indicator--9713600a-7721-4c65-980b-beade325e51d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756bcd83-d388-4eb3-b5a1-26aad45da5ec", "sighting_of_ref": "indicator--f5b86862-d1c3-47f3-bcb6-4839a9a81527", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b69dc84-d8c4-4d50-adb6-0b639bd1d2d9", "sighting_of_ref": "indicator--63f603f7-5601-44a3-b045-662aa1bdfe95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c65122-103d-4346-8b47-e17211d3fdbc", "sighting_of_ref": "indicator--71ffd9ed-4c69-4d5f-9598-72a4c0926ae3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a132760-ba44-402e-814b-db48d43f27af", "sighting_of_ref": "indicator--b47ca6f5-cfcd-47ae-bc22-d48410c79917", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebf9fe1-bb76-4c5d-9012-a2f27e8b0ccf", "sighting_of_ref": "indicator--b7758682-a338-44d4-8305-69000a99c5e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad795dfb-9ee6-4959-bdc1-a88b1f1c472c", "sighting_of_ref": "indicator--379d37a3-5794-4f79-8e02-b1962c837639", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0103ac-e115-44f8-a97d-5fdb43880be1", "sighting_of_ref": "indicator--3e5b49b9-a5b1-42fd-bbf7-ca66e0949290", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e094ca-9997-4c91-ac0b-86df7faea733", "sighting_of_ref": "indicator--a871dfef-a274-49ea-a358-680181b4b0b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b6761a-77d8-4718-8f26-c862f73a122f", "sighting_of_ref": "indicator--f96938b3-4865-414e-b7e0-7d55e1f6daa8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c1c8dd-1ca7-42f7-ae83-18336adfc3f4", "sighting_of_ref": "indicator--a975b329-9d67-4780-8803-bfe3d3a1d38e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e6729b-7c80-4a6c-9e2b-bdff8089657f", "sighting_of_ref": "indicator--b8a8f6e5-f5dc-4af5-9bb1-638f1416e0f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ca07cb-79dd-49b5-bd6a-809144f478a1", "sighting_of_ref": "indicator--efbd1864-4f49-49de-9df4-bcbc09eab73a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f179fed-24a7-4a84-b14f-1aec8a961ab3", "sighting_of_ref": "indicator--edaebd11-812a-45dd-81ef-e7d7f4151910", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60257f6-3721-4219-9556-f51a9905200e", "sighting_of_ref": "indicator--ac7f90ed-1265-447d-9ace-0a832cb6bf58", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2c521c-c844-456e-adf5-bf23ce99fe35", "sighting_of_ref": "indicator--244989ae-fd36-4ea9-a7aa-e419c650841b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be574edc-3506-407c-a525-d4ecffbf82f8", "sighting_of_ref": "indicator--4ebf2ca1-58d5-4424-9971-4c1102677b5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cac7b28-8572-4612-84f9-12d2b6a9f287", "sighting_of_ref": "indicator--ce6b8a99-2e3d-4673-8cdc-fedfb3416889", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69db2e84-1ac4-4fc6-a7cb-04dbda81cc02", "sighting_of_ref": "indicator--5d023862-67d0-4c44-a1c3-395a92db5aec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c772fa-9bd9-4731-b8f8-d2a741f45f19", "sighting_of_ref": "indicator--a6c61fd3-2db4-4e12-887c-ab85adb47064", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136f2f1b-387b-4521-af5d-b47d7556006f", "sighting_of_ref": "indicator--6317d670-8fc9-44f3-aa23-3f6ad496cb14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1427ee41-05bd-409c-b6aa-0db603550ed6", "sighting_of_ref": "indicator--15b80514-ec8e-4220-9c78-080b952add3c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b03019f-f646-411c-9d3d-a6c54699c0a0", "sighting_of_ref": "indicator--43d6719f-0359-42d7-8a83-1b7fc962b71a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45b9e9f-3607-493b-8020-655f658e8da0", "sighting_of_ref": "indicator--041c06f0-1dfc-4118-9c4c-100eb0e94d51", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05be3de-88e1-4b78-aef9-aad2177ef182", "sighting_of_ref": "indicator--95ab7d9f-eb26-4bc9-9e0b-1f5bdc7472d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647045d7-b7a9-41ec-a7f2-ea30749d9fcc", "sighting_of_ref": "indicator--31805f85-2a38-4183-af3c-77cf4bad480b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4cabc5-6a1f-4c23-b374-5f5166b96fc5", "sighting_of_ref": "indicator--30f3f6fa-5040-4642-a50b-6ddf66a937c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3f7b10-80d2-447f-b8ec-dd330553cd4f", "sighting_of_ref": "indicator--ceea20ea-4ac4-40d8-af4e-875c1aa3b639", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdb1210-2c19-484d-b0da-f0712f05d9b4", "sighting_of_ref": "indicator--20d3683e-b09c-4e92-ac9d-9d9888961dac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3db83a-481d-4c03-a26e-7051a5be7df4", "sighting_of_ref": "indicator--0655b3f1-46e0-4310-9a26-dac61a9764bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57814ffe-5443-4b13-be82-d6dbd832fda4", "sighting_of_ref": "indicator--fd165771-14e6-4c07-8090-f1b30ba8c0f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f50e4df-71f1-4d3e-b95c-5747954d9d82", "sighting_of_ref": "indicator--67591ec0-8c3b-411e-8411-af32ed295f39", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7234f498-05e9-456c-9a8d-db0f486c7675", "sighting_of_ref": "indicator--393c332b-00d6-479f-900e-30c341a46e12", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c24e0d-273d-45e8-bf5f-f45071e9274e", "sighting_of_ref": "indicator--2884bede-4f9e-440b-b6e6-1adfbf1287f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d931399a-69b9-4332-b670-7d367661ffd1", "sighting_of_ref": "indicator--aae0d5a6-098b-4624-a8de-5ae32dccfae0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c92535-551b-48f5-96a4-980536fe2848", "sighting_of_ref": "indicator--9b8df294-4e01-4ec5-b2ec-863c877a7dc0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43986079-4a09-4a84-9b56-03340fa900c2", "sighting_of_ref": "indicator--a35c1280-5a29-4ea2-bc34-f2b2cb81913f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14871a9-10b7-44c6-8eaa-6f72bfa77b44", "sighting_of_ref": "indicator--df2103cd-bf8d-4cd9-91e3-f4b867c6e360", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b069fa6e-4c06-4782-b1ba-ad8d8cc6703b", "sighting_of_ref": "indicator--689f1e7c-6ef1-488b-93dc-a6f4d10d5132", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75fc5b-f258-4e1f-b43f-043d95eb8af9", "sighting_of_ref": "indicator--2854e7db-ede1-4a90-9bc0-9a1d0e94b19b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52321367-1420-457b-90ea-4f42e69f5283", "sighting_of_ref": "indicator--6f6ad245-e4cf-4b0e-805f-7fd808f72417", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea8cfdf-4c7f-41c2-8840-c56b0983fcaa", "sighting_of_ref": "indicator--50f53151-04ba-4cc7-8c2c-92035d543c33", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e479c8b-591b-490c-a9ca-63de7b75432b", "sighting_of_ref": "indicator--58aeb90a-4861-4d13-bb35-bbfeca706697", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0444dff3-b478-4497-a35a-0a34493f4442", "sighting_of_ref": "indicator--40ab8b89-3659-4638-a618-cab34c3b7698", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14651b1-32fa-418c-9dba-c43627e5673e", "sighting_of_ref": "indicator--c2d7925f-0f3a-455b-8acb-93d30e346c87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d0557b-2618-416e-be83-6a791b45ce94", "sighting_of_ref": "indicator--7293ddc3-2595-410c-89fc-c35c947671ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee8a0df-058f-4c14-b805-fe819a6a879a", "sighting_of_ref": "indicator--a02d1ab3-2320-435f-aab1-8c72d1601693", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456336a8-0a33-446f-8968-da9fb51de807", "sighting_of_ref": "indicator--f7028aa1-984f-4262-8bcb-79ad41943d02", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d796e6a-c371-4171-a9e3-fd13191ea580", "sighting_of_ref": "indicator--d172fcaf-37f5-4062-bdf1-45775f2b622f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a814ab-eef4-4f15-8a10-1bac4c64f76e", "sighting_of_ref": "indicator--b93fabff-6a04-4dbe-8bfa-413dce05fb43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90015437-22a5-4146-9d7a-662275bd92d9", "sighting_of_ref": "indicator--ab4d25da-baa2-471c-8622-b15ba3d74351", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c917879-1c0a-4a3d-9b8f-f222ad1eb618", "sighting_of_ref": "indicator--f342b631-5ff1-4e34-b367-2930976b3c20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78e5030-c179-433d-a0ca-c4d257804ef5", "sighting_of_ref": "indicator--65854e9c-8b8a-466d-85fd-efb5821a1694", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cb0cda-ca3c-4f02-8d56-4e07f7b92375", "sighting_of_ref": "indicator--127a90d6-877a-4b58-87c2-8a5e0e4688a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b8d0e-1ca6-4450-86d9-bbb7020530ca", "sighting_of_ref": "indicator--dee4bf29-b7c3-4b4b-bd95-6ad53c17a9ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da174540-4257-4796-bdb0-55f9865f5d11", "sighting_of_ref": "indicator--264697b9-6bf2-4975-b990-1cd1da02919c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b97632-544d-4521-bf26-62b4241d0c1b", "sighting_of_ref": "indicator--7e6a6e71-0a80-4fdf-ad5b-d4a67eacb6ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdda8351-f01a-4aab-ad8c-decd669a5487", "sighting_of_ref": "indicator--4f3084f7-ed6e-41b9-972f-e860a9a64d5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a832d555-bb32-4b2b-894a-76e2d5aa148e", "sighting_of_ref": "indicator--4e88e845-da9a-46fe-a475-c3ce456836e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fe4355-2823-4fea-98dc-24afc6381f6d", "sighting_of_ref": "indicator--167e7ab4-e496-47a8-8774-da2dbac68614", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa6c2d4-8d6e-497d-b67c-ab1edd83c608", "sighting_of_ref": "indicator--f4981f69-4b78-4155-b4e5-eccb18f76896", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0954022-b2da-4112-b1d0-6d373fff8754", "sighting_of_ref": "indicator--7f6b9b55-8cb8-406f-99b3-c608aaa76a20", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c65a33-4c67-4cc0-8089-2b0765bc3fbd", "sighting_of_ref": "indicator--8a703dbc-343c-4f7d-a077-87dfd920d998", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0948babc-10ef-4968-974c-aa6e186e5348", "sighting_of_ref": "indicator--57e81d9d-bfc1-4c06-8465-ee77f957e623", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca83ac0-25fe-4309-8c90-4f7e19e7042b", "sighting_of_ref": "indicator--2958c0e7-bbd1-4d4d-bc2d-fb07dfc1acf0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91538e8c-9b38-4418-a0ff-2abcd5fe0f78", "sighting_of_ref": "indicator--cd56b288-9e6d-4e94-977c-c41105de10af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08edb49f-fbcf-4316-a264-f108ba6c35af", "sighting_of_ref": "indicator--2f99713a-80d2-4589-b62f-988eff26111a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c8d643-1228-41eb-b4b8-3d68958d07ce", "sighting_of_ref": "indicator--72bc9edb-34f7-4fdb-9b97-4c956e94b29e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa5631a-67c1-4427-b73b-7d82df59b797", "sighting_of_ref": "indicator--7d2c9900-6216-4cb9-b8ad-70b278682288", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38834586-ee7e-47e8-88f7-413df1d09273", "sighting_of_ref": "indicator--a85fcee0-679d-4a43-8afb-f6972b963852", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecf9fe9-24d9-4121-8da3-5b844d6ee40d", "sighting_of_ref": "indicator--c574155c-57a0-4873-a3be-cac9965ec6b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da17c91-1381-4753-8be7-5aa5f59c06ef", "sighting_of_ref": "indicator--5d945436-c9a3-4a42-b105-5b86576b52ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a499f6-f831-4daf-9dac-ca1a9b23fa87", "sighting_of_ref": "indicator--fd5151bf-16c5-478f-affd-d053654d1e40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58bb85c-da22-4ce8-83c6-1c4369765ec1", "sighting_of_ref": "indicator--88f66cca-042b-48d1-ae99-9b259a757ae1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91047997-39ee-43af-b9bb-618dd1dc259a", "sighting_of_ref": "indicator--eed9066a-7671-401b-a020-481ccd913229", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a112a3af-4179-482d-80f4-0eee446d761f", "sighting_of_ref": "indicator--62a757de-54a1-4184-bb32-064db97a7cb3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889bda3d-34d4-4654-b9d1-2e3c6d6d2e20", "sighting_of_ref": "indicator--3099b813-d534-49db-8cbc-d7de83624c6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e0e073-18da-4d9f-9d32-b6ca4b0d7663", "sighting_of_ref": "indicator--6c7463eb-7769-49a5-94ef-e80e8dbc241b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e370581-91fa-4669-b50e-63afdcb6fb7b", "sighting_of_ref": "indicator--c639f424-5daf-4a7b-9093-cb867ee94ecb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c76e724-835e-4e2f-b9d3-a77b298b3a86", "sighting_of_ref": "indicator--b57ab982-72df-4b8e-ba10-c9432679896b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdccca6-10c1-4d16-85f4-91dc268f0f29", "sighting_of_ref": "indicator--cbd31a53-f13e-4309-9bf6-5e353bf23076", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac933a9c-e94b-4532-bd9c-0db911ae43f8", "sighting_of_ref": "indicator--08d98c10-6400-4fa7-959c-f4ec27ba2741", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac7f90a-4ff4-42f5-b290-2b7058c602b8", "sighting_of_ref": "indicator--e3642c6b-b4e8-4c56-a3c8-926ae4a0ce1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a670a73-5552-4d0f-986d-2cb6485ad241", "sighting_of_ref": "indicator--440e44eb-6dc0-451a-b56f-7b0e39ac8e5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b958e94-3d65-48c6-838f-9bc26b0acf4d", "sighting_of_ref": "indicator--dd0fd924-8e82-4beb-956d-c53c6e949c05", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942852f0-d816-4d4f-ac1d-9cf5d375f574", "sighting_of_ref": "indicator--966afa33-f412-4537-8182-df22514fd25a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c27db2-7030-4712-a113-8ec3dd6ba51e", "sighting_of_ref": "indicator--5db24407-d8f7-46e3-a848-ff81a59ba779", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33c0573-f278-409f-9deb-809b6aa54209", "sighting_of_ref": "indicator--67182e8a-5653-4fae-bc5c-3048a8269e90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e25b28b-74d1-44ca-8421-d4b47b465102", "sighting_of_ref": "indicator--b107e427-3236-43b4-9bff-8f1df4fd26c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3266e658-ea94-4896-b419-86c2bd79b2fd", "sighting_of_ref": "indicator--ab430147-5bd0-4244-a601-ded00508260d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aae26dc-7015-421e-adb3-a8fca9d4eb58", "sighting_of_ref": "indicator--2dd958a3-40d5-44a7-9ca9-6d7b7e0ff84c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeaeeb8-c677-45e3-b27d-dec8b731b0cb", "sighting_of_ref": "indicator--9bb8e990-9304-4d07-98f4-c71b52f63475", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea6370b-bece-46e7-bc59-21dcdefb8670", "sighting_of_ref": "indicator--ec04e707-94e4-4124-b386-b5705f57bc34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423ea22a-e426-4301-a1ea-488ac71daf35", "sighting_of_ref": "indicator--8c0d84fc-bbc1-4fbf-b5cd-796e162435d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752d1b2d-bc7f-4430-9a43-1e3f4fc812d0", "sighting_of_ref": "indicator--8deefbff-0cd4-4b1e-a515-72a2998f35fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72372287-86ca-4ad1-a5bd-31dc78e511ee", "sighting_of_ref": "indicator--c2ffdc0c-1e4f-497e-b286-90b444c576bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b969b732-8601-4a9c-a034-116aa581996c", "sighting_of_ref": "indicator--e26594d2-55a5-40e1-a343-7960a2a6eee5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90eaec1-5e2e-4b9e-b61a-af4a8e0d754d", "sighting_of_ref": "indicator--31e99c22-6d89-42ab-a948-34fa0f7c2f7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18868b3-3730-43b3-89e2-0654dc902f9d", "sighting_of_ref": "indicator--8c5b8d64-0d0a-47ef-882c-1e9ac6dc2a11", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e48331-3d23-4c07-b926-25dd54d9e273", "sighting_of_ref": "indicator--8844a7a9-d630-418a-a6f2-fb6cb5f38dcd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e15834-05fc-4c07-9ecd-690e87bee606", "sighting_of_ref": "indicator--10c0aaaf-5294-4ea4-b056-9256c2684344", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9af1ec-be15-4686-8879-11111d1f5bdf", "sighting_of_ref": "indicator--c9e2c916-7b9f-4482-aa27-4736a2ae21ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce93f98-abb9-4bc4-99d2-30f33ed62a62", "sighting_of_ref": "indicator--5dfd0be9-5078-4e03-82a3-50408ec43ac6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7f0e34-1300-4dba-85e9-648cf23a091e", "sighting_of_ref": "indicator--f2e761bc-0f00-4d35-bb37-0524fcf896f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed8a3f2-915d-4350-8684-bb432a23917c", "sighting_of_ref": "indicator--611597a4-5f55-4231-8333-7a679abf34b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c11bfa0-d1ed-4c35-a2d7-e78e0b2ccacf", "sighting_of_ref": "indicator--b6fe8d73-1e1d-46fd-9310-5193738b447b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4298296a-19f7-450d-b18b-a9dda2ce2e54", "sighting_of_ref": "indicator--eb06b45b-a294-471f-9a15-3306a52eede9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7986ed02-277a-4c37-8b0a-5fc22c2e7360", "sighting_of_ref": "indicator--be33fd6e-d02e-480c-bcdb-09634d7dfeb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb71831-e55c-4930-9a39-89fd2d5394c7", "sighting_of_ref": "indicator--a815d5d9-ec9d-4564-9f52-0e58d938d10f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f499ec7-ac29-4512-ba88-b9376cf8de1c", "sighting_of_ref": "indicator--df67f26e-302e-4281-8ec8-603ee2c10d14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585ff887-712d-411a-b451-dc91831789ee", "sighting_of_ref": "indicator--82cc5a5a-ae52-4477-8249-1d39b3aecec2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552f2e8c-5aa0-4519-b10e-3f33de018ef9", "sighting_of_ref": "indicator--22b0cbb6-d566-4e3f-b3a0-0fff31b2677d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bac162-74f3-4b88-89d4-3e6ac04f7c37", "sighting_of_ref": "indicator--50b7e73e-42aa-4aab-8513-24589244c755", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7309ef0-d3ed-4245-b168-ebdd561517c7", "sighting_of_ref": "indicator--4b94c244-ba7c-4b2c-9006-615100b6cf83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d527a7-02b7-425b-b7e4-079b09109eed", "sighting_of_ref": "indicator--fa482c37-3e32-48c8-b0b8-9d2a2aa9f50c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcd2ca3-38fe-43cf-b963-b1b979b7b0ff", "sighting_of_ref": "indicator--b8720288-08a6-49ab-a106-b33c89daf4c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecb2b0d-4017-40d2-8a7e-b88a619a7278", "sighting_of_ref": "indicator--8ebc243e-6b26-4e93-9005-7f9fa45c5a85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95a5641-742b-41e7-9d19-d600d04d3feb", "sighting_of_ref": "indicator--1d4a1c98-e46a-4f08-af4d-507267aeca48", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabb7126-3e48-4cea-96df-1fbdf1db9ce4", "sighting_of_ref": "indicator--6f7e2b4d-75a9-4482-93c4-f3bef355ee55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356dd65b-aecb-4aca-8fdb-198928fe7fd7", "sighting_of_ref": "indicator--e0f28df1-ef27-4b8f-bdd2-34df25d088cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33286f9f-9c55-4e6e-b7da-6e70a8dcbe8a", "sighting_of_ref": "indicator--e2191ef2-85d5-4012-8e9d-0f72109bc4ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36b4568-316b-40ca-bc43-4e177600ed65", "sighting_of_ref": "indicator--d50ed7db-ee78-4f62-b480-2e88308c023d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a138f08-d293-40fd-8ad6-afb648b48636", "sighting_of_ref": "indicator--21dd4fd2-eae0-4eb6-a469-99e78879f671", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405eedc0-38c9-4cea-869b-0e17c8a2fa87", "sighting_of_ref": "indicator--b18bbfad-54ed-4316-98b0-b27063306a31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fab190-66dc-495b-ac43-e0eec5f080d3", "sighting_of_ref": "indicator--3041fe43-1719-4951-b808-63a4876b0896", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6462b86-ea4e-4f6e-a406-88c8a3a20697", "sighting_of_ref": "indicator--7df5e962-7be7-487c-adcf-3e3e15ddc279", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f2100a-a2a1-4678-a1a9-6b2d256e421d", "sighting_of_ref": "indicator--48b135ca-d27d-401a-b478-5fabb4912aaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f648441f-db95-4100-a344-fdc0ad884399", "sighting_of_ref": "indicator--18b0fce8-81e7-48ff-9dd2-4442550ba630", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d5c7fa-8679-4eaa-87c6-9f5f15041526", "sighting_of_ref": "indicator--6e8cd392-4c22-43a0-b794-a2e27be20593", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da26ce00-93be-46c2-b978-af261518e49c", "sighting_of_ref": "indicator--ce46edc1-406e-4fa9-a2b8-5ba6960d0058", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f8101-bb46-4481-b5fc-ce73be398887", "sighting_of_ref": "indicator--bc7c4055-8638-4847-91a8-b94ae13f1624", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1ac774-55c3-421c-90b1-11a7073b0bd7", "sighting_of_ref": "indicator--f461c67a-adeb-47fd-b39b-d32628945ebb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a23bb8-a5e0-4f48-aeb5-b47a28899a9f", "sighting_of_ref": "indicator--9d8449f4-148f-402e-8871-93d368222f00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddff299b-e792-44d5-b073-f693877bdfd2", "sighting_of_ref": "indicator--6083d923-e90e-4ccb-bb5e-59c68c89204e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a704a7f6-ed67-4eb6-81db-63f84a27a8ff", "sighting_of_ref": "indicator--9085bded-d07c-473c-a35a-916850cd3741", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16131e6d-df92-49d5-ae43-191ba27b28e7", "sighting_of_ref": "indicator--4282218e-9db0-43ad-a660-9340c2e09234", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b530ad-9ffb-44e1-8f25-85b31c76c9e9", "sighting_of_ref": "indicator--b7139379-2522-41a9-b179-387c998a4077", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb507a9-e573-41d4-ab1d-bf51ad3dabc0", "sighting_of_ref": "indicator--a128aca0-df1e-49da-868b-e494cb10ac39", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78629e48-c6c7-4507-a103-9c20e363cbad", "sighting_of_ref": "indicator--4828baa4-a82e-4701-b8dd-162158c6d305", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58126541-9241-4343-9509-a26616de78ae", "sighting_of_ref": "indicator--24c0235e-a3c7-4f05-a640-01fb6188252b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81857ba-6916-4b82-8f57-91f1b14d70f6", "sighting_of_ref": "indicator--1c22c0f8-5da3-4b87-a86a-1044e371ee57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac39213f-8825-4403-a3b7-003c72f36575", "sighting_of_ref": "indicator--d73eeea3-bc5a-4564-be72-c0b43fca1336", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b645aea-b371-4e44-8707-55b5c16f412a", "sighting_of_ref": "indicator--2ed0dc9c-e3d0-44a6-a2c5-7971756eea22", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3333dfcf-7ad9-4b84-badf-47e467a57a9f", "sighting_of_ref": "indicator--50f48292-0f25-4d40-84ba-9dd30a5b0214", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc27326-0936-442c-bb4d-1b8db14736de", "sighting_of_ref": "indicator--384d28cd-9480-41e2-897a-f94c3d7aeafc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ae9fc2-b229-42cd-b56c-c774556f7dc8", "sighting_of_ref": "indicator--623234b9-e9eb-49b9-a594-f10ad50644d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ac4e1a-0774-4532-8667-bdee39240be8", "sighting_of_ref": "indicator--ca34643f-3b89-4780-a84c-97855153e45f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b2babd-e7bf-4f7d-8633-f294e9b79e1f", "sighting_of_ref": "indicator--78334fc7-5bbd-4503-ab94-a13ddb754c6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf242f-3f22-4834-b494-dd058de82f5a", "sighting_of_ref": "indicator--f38e3092-8c9b-4800-8f52-967070d5098f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97270b8c-ae3b-4c3c-9910-277aca6d0182", "sighting_of_ref": "indicator--c1041045-0bc1-4672-a818-3e7d419ff2a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3fd298-dde6-460a-a5c2-e776e4249a93", "sighting_of_ref": "indicator--279c6c05-0db6-44da-b0c5-4967650f74c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bedcab-5458-4781-af01-fb55827a29fa", "sighting_of_ref": "indicator--76313881-039d-4895-aaad-5a0f73426003", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d9168c-d964-4e96-ad89-3a2916e2c743", "sighting_of_ref": "indicator--82bc61e1-6b4f-4b0c-8abf-352a744e6bb6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989d771d-52e2-452d-a837-b0be48fa20f6", "sighting_of_ref": "indicator--5ea4912f-9421-4a13-ad34-9259db134f95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890ae94c-797d-4c23-8171-e38b0874da4c", "sighting_of_ref": "indicator--76f33842-ba6c-40fd-8971-19d8719f93e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89dea27-9f80-4e51-8322-8a1ceb5506e8", "sighting_of_ref": "indicator--e9c4e90c-94a5-4d19-bbb9-2e01c0f7a08b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97576375-ffb9-4cbf-a3a8-cb390e218dd0", "sighting_of_ref": "indicator--c2b32999-891f-40d2-a35e-3bbfbbe45ed3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29d5fff-f87f-4e4a-b3ae-582096e5239c", "sighting_of_ref": "indicator--9849d2d8-08f2-4982-bfa9-e7d765efee8a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccfdfd2-7eb2-4abc-a01a-437f39aa50dc", "sighting_of_ref": "indicator--974ed188-abd1-43f8-935c-953b2cf1bbaa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d2e7d6-aac4-4e24-bddd-e55ea333a339", "sighting_of_ref": "indicator--b7938ee3-96ed-4e93-bd97-af1ad9985bb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b8221d-b6b1-4c27-a393-0a294955c671", "sighting_of_ref": "indicator--6b39c76b-feb4-46f8-85b7-b0d262656127", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5ddf1c-6294-41ac-b304-934cb58d972e", "sighting_of_ref": "indicator--53fdb51f-38bd-4bca-914b-eb6d6a30c795", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1856a1-324b-4dd9-be48-2318f1cc82cc", "sighting_of_ref": "indicator--9455322a-c3aa-475b-a13f-ee9a8a0fe9d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2c60fb-2d6f-4e27-92ff-eed5bf239c62", "sighting_of_ref": "indicator--a87c1a9c-9664-49fd-ac45-7fe4907894b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0768244d-8e16-48bd-953f-4184d7f71c84", "sighting_of_ref": "indicator--182f7da1-4c30-4cb1-a9a5-3e4e0e7b97a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a270b6b5-c09b-4693-bce2-9fcd29ee652f", "sighting_of_ref": "indicator--b078d1f9-f202-48e8-b21a-da888911c897", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce5e9a6-8098-4659-b25f-8d1a0e88d84c", "sighting_of_ref": "indicator--8b658ad6-6b2d-4aa7-9bd0-e809f6a6ddda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4c0754-5a62-44f1-a522-51f106538c14", "sighting_of_ref": "indicator--590b7d41-9c01-48f8-b5f5-5b2d9840713d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f84544-85c8-4e89-bf10-0a17c0cb3e27", "sighting_of_ref": "indicator--53fe8aaa-c831-49d7-8429-0ad7fe2e80ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6dad29-07dd-40ee-86f1-7a224d256cf7", "sighting_of_ref": "indicator--5490ee75-855b-4673-a9c2-4c159d75dcf4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777dbb6d-5992-4d83-a97b-7cbf1784d7f7", "sighting_of_ref": "indicator--a19697a9-b543-46bc-9a93-5c10574c855c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105dc869-6de3-403d-aaed-380ca9f66a88", "sighting_of_ref": "indicator--ba46d0c7-e4db-402a-841a-f7ab39eb6b91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d357e715-14fe-47c6-8ac3-4a19c7c34c86", "sighting_of_ref": "indicator--9add8c83-d0af-433e-a669-822ad81e6a55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e265e55-3ee4-41d2-977e-58297fbc18a8", "sighting_of_ref": "indicator--20b509e2-d670-43c5-ba95-11c4b49404f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a291bf-c22c-408f-9612-ca5919bc3970", "sighting_of_ref": "indicator--23c27cc7-4279-4fbd-a546-fd972ae5fb26", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d18d0f-22ec-401c-a084-40f6a7636017", "sighting_of_ref": "indicator--aed7f96a-e344-4f4e-83d5-8df876ca0e7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02079130-52b4-4289-ad56-f41db9b7ee59", "sighting_of_ref": "indicator--dd31c28f-ce03-40de-a0a4-b47734c6654a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dab071a-dd79-43d8-a297-b26c86741b7d", "sighting_of_ref": "indicator--f184296c-806e-4efd-b8f5-7a751a74e77b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc60a32a-aaa2-4ce5-95bd-d090a76e6499", "sighting_of_ref": "indicator--a888dcd2-7f51-42ca-adf0-676a78f96da7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd4c0ad-f898-485e-a9e4-89af8b5e78c7", "sighting_of_ref": "indicator--bd951384-bc11-4411-9d16-4737d70ec392", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa85e6e7-a101-4dc3-b34a-0a73cea4bead", "sighting_of_ref": "indicator--7ac877e6-9b30-4254-b3ef-d85aa3cf1ac9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3075468-abe9-43be-8936-2245735843d9", "sighting_of_ref": "indicator--b1eef8dd-db8a-4f03-9539-030673bc6242", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c548df7e-061b-4094-8431-c2d8025adfce", "sighting_of_ref": "indicator--11d9bf2e-dbdb-46fa-9db7-108ff51060f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7978ddcd-65f9-41bf-adfa-777b492ea844", "sighting_of_ref": "indicator--27a1911f-f8fb-4038-97e5-2d5bfb64b744", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6934e8-2c49-404c-b3f8-2208a2515707", "sighting_of_ref": "indicator--ee918d43-c723-4a70-b6a6-2ec8b70ea343", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78df69dd-9f16-4e02-aa0c-5a201fe9a212", "sighting_of_ref": "indicator--56b935b0-1306-464b-b0f5-adb1f5603d9f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50854214-f62c-4214-8e44-c78d1f38830a", "sighting_of_ref": "indicator--96c8b92a-38e2-4da9-824c-414db6b5bc1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60412534-abc8-4935-b99b-9e9a9c8eacc3", "sighting_of_ref": "indicator--65fb04e4-0031-466a-b989-c97d05191bd8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b5031-f1a4-40fc-8920-40313ed3335e", "sighting_of_ref": "indicator--b0c9c767-b56b-4638-a488-eb98865ccae6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84526e86-fb0f-4ad2-9bf6-5536c194a837", "sighting_of_ref": "indicator--b8799887-ba51-4f6a-84ba-3acc0cd9e10c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8519839-1269-45bb-ae7a-e087d39bc83f", "sighting_of_ref": "indicator--3dd9ac4d-da4f-4956-a017-f77f7d47ccfa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1902a81-80f3-416c-b1a9-ce3e12681741", "sighting_of_ref": "indicator--1c6fdbd5-3b9c-4ede-8b75-5c4ea237d588", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c98ab1e-2f06-4af1-b305-59738d380f4c", "sighting_of_ref": "indicator--f696a71a-908b-4d56-a23f-0c995bc9f78c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1299468b-2877-45e7-b85f-7dbf3dffdd4a", "sighting_of_ref": "indicator--b7bec530-60f8-479d-acce-83fe4c0cb6b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650b2192-d1f1-4119-9820-4806d6a040bc", "sighting_of_ref": "indicator--65bfd489-9727-4e60-8a18-a441ce441d56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be56a65-8957-4adb-bede-331c81ee340b", "sighting_of_ref": "indicator--0588072e-7c8f-44d2-8275-01820cee3bb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c65858d-8597-4af7-8a6c-eefcb539a91b", "sighting_of_ref": "indicator--21b5cf7e-ee1b-4489-8f46-f6d33a435cbc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67897a9-eb72-4a9e-81a3-ce8c2461b03a", "sighting_of_ref": "indicator--bf5863eb-f470-46c5-af07-233ddd6643e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62e56d7-4498-4921-b2e3-1fe5fdc24f40", "sighting_of_ref": "indicator--69f4dfc3-4c24-4360-9ecf-3c2e1455b6e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38144e1-10d6-40bb-91a3-64b9a9af119e", "sighting_of_ref": "indicator--aa54a32f-25f3-425f-b792-6d82a725bafb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e38a391-9594-48f9-ae08-f5912e207418", "sighting_of_ref": "indicator--debdc2b3-24aa-401d-b12a-9d040a4138aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee4282c-8be1-4c0c-9dd3-53e8cf9c8f6d", "sighting_of_ref": "indicator--be63b75a-a687-4c9c-8087-7437ec1e3cf7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa81dcf-078e-4a8f-8831-9512fe4816b0", "sighting_of_ref": "indicator--8a7bcd7b-c845-4e74-b489-49a004dd8d51", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706fd448-0e95-4c33-a1ab-ada2b31258e1", "sighting_of_ref": "indicator--a3c570dc-445f-49f0-bd23-a30346c91e3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e726d16-ff40-4be3-9b7c-6ac580359a0a", "sighting_of_ref": "indicator--c94263cf-97bc-44c0-b593-a5ccffede676", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f1873d-49a7-4158-b34a-bf61bf065da3", "sighting_of_ref": "indicator--16327a47-b791-4729-9a8c-19ce89659f1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c0a2b3-ecf8-4fb3-919b-66aa81d57388", "sighting_of_ref": "indicator--9b43cf94-13c1-48aa-b461-745119b29d6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91db8ab-7447-41de-80b8-e643aafb5d2f", "sighting_of_ref": "indicator--501992c8-6905-4448-b6cc-18cce3619205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c341e2bb-25ba-4228-98e3-b41931ad5e92", "sighting_of_ref": "indicator--e47ed646-2137-4e54-9091-0c8873dac434", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98794a9-d39c-42e1-9eeb-793c3dd9ac9a", "sighting_of_ref": "indicator--57afa965-8df1-49ea-9362-dfb77efdc474", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82de095f-1a16-48f1-8b59-91521d3abbbc", "sighting_of_ref": "indicator--228465b6-c980-4d5c-b929-b8494c89d45d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444e6eea-6f2b-4750-8c55-e84d744457bd", "sighting_of_ref": "indicator--3b261624-058e-47a3-a2f3-72e7d5b88d01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8118d7-dc59-4044-9045-a9ecad0211c7", "sighting_of_ref": "indicator--5d9914d9-9e4e-4753-a417-a3d4346b65e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d0615d-b386-4c07-93be-d26e8c9dac5e", "sighting_of_ref": "indicator--aac343ce-c92e-485d-aa34-838f9c5f58cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1becfc-b66a-46bd-ab3e-b0cc4c48981a", "sighting_of_ref": "indicator--a3741305-3271-4a19-ade0-1423db319def", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ed9470-651e-462f-ae8e-3b3ea05a493e", "sighting_of_ref": "indicator--a2d72ab3-8bf0-440a-99cc-718cbbe6113b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f41766-0a70-4502-b1e1-dc7a2c4fa0e6", "sighting_of_ref": "indicator--d58d50bc-6c85-463d-8ef6-b680fc952bcf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df724e9-a01a-4cf5-a937-d1ede178abae", "sighting_of_ref": "indicator--925296de-f580-4f9b-bdc7-d85760b8cd07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae52eec-1dfc-4f3b-817f-3f758ba26f06", "sighting_of_ref": "indicator--772650ff-23e2-47cc-95eb-206060894a9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b27244-319e-4a5f-b54c-b7826e86ed8a", "sighting_of_ref": "indicator--bdb77010-6409-4c83-ab55-6067f037c339", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4d8933-6046-4f08-a4a7-90eb22e34905", "sighting_of_ref": "indicator--01c5bb82-a58b-447d-9576-6100bc6dc30f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e5736b-8090-4647-920d-49cf35231a99", "sighting_of_ref": "indicator--ca53c76d-c12e-4cf9-8112-deb29a33a556", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd75383-8dbf-40d1-b6d0-51a527075b98", "sighting_of_ref": "indicator--57bcb5fc-3708-4f20-b4cd-8a7bf3662c26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29e6700-3af5-42ec-a7cc-7c76a984d5e5", "sighting_of_ref": "indicator--5d499093-54df-4f24-a2dd-ab1f18e9c584", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e07ec84-c271-4d9f-a6c2-6f04a7757f71", "sighting_of_ref": "indicator--ba50d14d-1aad-4418-88d4-95fd6ebd26bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1191c607-e583-423f-b901-d8df5235c6e6", "sighting_of_ref": "indicator--34a8eea3-24ca-41ed-9ad9-128de5d4387f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82db0d69-7832-4646-b65c-f22ae1668710", "sighting_of_ref": "indicator--98bb4c29-9972-455a-97ca-feed669e0986", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59804301-aeeb-40c0-b51d-25aedd176936", "sighting_of_ref": "indicator--e0acc818-2ba6-4cd0-9f3d-e61718467c1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89bc80-ff6d-4282-9af6-6eb0f0f67c75", "sighting_of_ref": "indicator--53592ff9-abf5-4354-a98e-690043ccd7e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17080186-f189-47e0-b301-fbd551f3e76c", "sighting_of_ref": "indicator--7b03c414-a77c-44c1-83d3-9a278f69d2e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fdfb32-8986-43b8-822e-35550239f2d8", "sighting_of_ref": "indicator--18d4d88b-a3ab-47c0-84f5-b58b596c4773", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b3f1aa-bf08-4917-ab4f-ee962118faed", "sighting_of_ref": "indicator--307ae6ff-c2c0-4c74-8a99-55bfc690df51", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb38a17c-92f4-4673-a160-94f5013db81f", "sighting_of_ref": "indicator--108220cd-69a9-4cfc-b5b4-9b14e62ff709", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9904915-8cb7-4d62-b80a-8b06679184e7", "sighting_of_ref": "indicator--3704a76b-0702-4800-a90a-a7bd64b9d8e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7e7d95-c35e-4992-b37a-4b0120f051d0", "sighting_of_ref": "indicator--eb5cb2c4-54c1-4acc-9530-feb173d20a69", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748dbe3a-dad8-4998-b4c9-d8fbc61baa79", "sighting_of_ref": "indicator--4c96b931-c2ab-4457-92f5-23bb5efa4ef8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5102537a-5892-4861-b5c0-c7f7cafae092", "sighting_of_ref": "indicator--be335d1d-4efd-495c-bdb1-65b8f2b81225", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3a33e4-caec-4182-9065-a4ddd4b37c89", "sighting_of_ref": "indicator--faaa1a3e-e118-4517-ba1b-26f0e6b30dac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836315f2-0c54-4a10-9881-be15f22c155c", "sighting_of_ref": "indicator--ab516798-104c-44ab-a4fc-b4e49b0fe5da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65fd5f2-bc90-4aa2-a231-82f17a1346d1", "sighting_of_ref": "indicator--404da3c1-7431-433a-a100-4d913cc0b80c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe2e546-a47e-4e4a-ad2b-c4e67d2e27be", "sighting_of_ref": "indicator--e63628cf-a199-4dbc-95e0-e704c53284f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bd42de-288c-47e6-ac2f-4afea5a39fd6", "sighting_of_ref": "indicator--366a6a9f-77aa-46d5-a390-47c48154e257", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201ea3e1-6479-4a84-a657-599b194e8968", "sighting_of_ref": "indicator--babd51a3-2a36-43b3-8356-f45009075c40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df7fb0-0d4e-4640-8638-fc94005e2630", "sighting_of_ref": "indicator--8cff815a-397b-40ab-8d9b-2ee27d695e83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f52dfb-5175-41bc-9480-289c2eb183cb", "sighting_of_ref": "indicator--30adb5e2-9c64-4825-a4f6-8c94e17e7ae8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecbd553-19ba-443a-9bd4-4a7901b14668", "sighting_of_ref": "indicator--e1fa3116-a16a-49b8-bef0-3d8b5ae4a8a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b510c1-6e1b-47d6-b95c-c2d8b2797335", "sighting_of_ref": "indicator--8479bca4-d013-4fd8-a426-b71ee76a2b60", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61e15c4-f672-49eb-b7db-8647cee3233b", "sighting_of_ref": "indicator--e40e9a2f-9e69-4243-ab01-0607768302db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7fbd29-1f07-4ee6-97fd-618c6b0e6064", "sighting_of_ref": "indicator--47808511-3791-4ab2-8ae6-ea6bd99878ce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbab7a4-71e9-4742-888c-d13fd2cdf920", "sighting_of_ref": "indicator--8ab25371-c309-43eb-ad2b-2e376df247fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae8dd52-600f-4017-a386-1997a0a6f1b0", "sighting_of_ref": "indicator--22762a83-a273-4dfc-a878-59be317e4019", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61558498-9518-42b5-913c-4c097f7543b5", "sighting_of_ref": "indicator--7a6b75d8-381b-42e5-a5c3-f58878d5f907", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aab3afa-ceb5-4cb7-a261-14ad372660e8", "sighting_of_ref": "indicator--de30688d-3ea5-4287-b661-bed94b7413ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b20c42-3265-4fd3-bd63-1c362b383287", "sighting_of_ref": "indicator--3588e351-acf8-4742-85be-058e10f1f322", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb1667f-14f3-46a2-9be0-90e1a456aa2a", "sighting_of_ref": "indicator--76117850-4882-4d30-b168-88ce63afbb3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23155169-8fd6-4026-a45f-ce4bbc45818a", "sighting_of_ref": "indicator--d7c921c7-e879-4549-903d-1959f8e2e97d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ce8ca9-cf60-4b05-8cc6-8eac374685a3", "sighting_of_ref": "indicator--3bac3f34-932d-4563-b76f-0585f3de8050", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2864af0-efad-4690-8486-966bbfa4b659", "sighting_of_ref": "indicator--cbed90b9-cd2f-41f4-bb3a-5a95f21e1e07", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88413988-86f4-47b4-808b-c4afccc0578a", "sighting_of_ref": "indicator--2ea1b7db-cb86-4f46-a569-b381318e9421", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92e2947-b7a6-4e8a-8e19-58a68eff4f02", "sighting_of_ref": "indicator--a302e91e-83ab-40d4-81e9-6de15076037a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f84063b-fbbf-474e-aed4-280f112a041a", "sighting_of_ref": "indicator--8268a4f9-6a95-42d2-937e-6489731465ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68740dea-046e-4876-aa8e-8412a6fae82b", "sighting_of_ref": "indicator--d9473963-1df8-4809-b1ab-4d509d7349f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2fb461-1f11-4a9f-a8ce-532915e195c8", "sighting_of_ref": "indicator--340af4ef-4776-4ae5-81af-a78d13c4aa63", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e813873e-1af9-482d-971a-ea91f2defcad", "sighting_of_ref": "indicator--aa834645-0a7f-416b-8803-ecc123e42d54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f963dbd-1812-4e3d-abfb-4a7060f0caba", "sighting_of_ref": "indicator--5cfb2575-66a5-40a1-9798-55ae749bca73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728c3c98-a37a-4ac1-9c90-d90691148dc1", "sighting_of_ref": "indicator--e512732d-4162-4813-bb44-a562ee63c498", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757919d8-7699-4005-b50c-12267066b7f5", "sighting_of_ref": "indicator--e04561f2-9e93-4e0f-9a52-311e1871a183", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c2409-dda8-4d5f-96c8-9542b29f1bbf", "sighting_of_ref": "indicator--0c4c4c36-8cbb-4936-86eb-8b380d306cde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd5d71a-9fe3-4b01-98f7-6039ad6c2c36", "sighting_of_ref": "indicator--3b69aefa-837d-45a3-bfff-7c7eba7bcaad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d7bd73-c4ff-4015-a4da-cce83643523e", "sighting_of_ref": "indicator--3bb5da41-de1c-4be1-a4a2-6a32b80d21a5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd736367-22b7-4404-9dbd-07e92d84a6da", "sighting_of_ref": "indicator--ee5e3217-c065-4084-91f3-40d89ca4f4a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53491880-3b05-4737-87d8-486b56b9bfec", "sighting_of_ref": "indicator--abfbbaab-47bd-4b90-ae7d-1bb8fc64cf81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038c1713-68ec-4d27-914b-e93d08da0670", "sighting_of_ref": "indicator--24456d55-d09b-4aa8-84bd-5afa6e7f95fe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bdd263-d4b4-4904-b6ad-455e707e8661", "sighting_of_ref": "indicator--ea2235e4-095b-4c88-8680-ec5fb970dd0d", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f4c20c-8389-4421-81f6-cf6ccf6bf159", "sighting_of_ref": "indicator--c2a861da-ccaf-4715-a39b-ebd2fd90fc55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5094863d-3726-4bba-851f-621f5c668c31", "sighting_of_ref": "indicator--b4ca64fe-da17-4594-b132-9d54386c4c12", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ee8dea-9e51-4310-b08a-3161e5e94512", "sighting_of_ref": "indicator--9c689c26-8e5f-465b-b79b-7bf1f0045f1d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c040da-7cc1-40dc-a2e5-e92430e4f011", "sighting_of_ref": "indicator--5e5f8254-8a83-4ac8-ae94-45091092bd19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f25b19-2042-4f17-8f8b-a0309d716289", "sighting_of_ref": "indicator--fbb68d37-5343-449b-a615-64dadaa48e9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85f820e-cdfe-435a-a816-d3994e1b5dae", "sighting_of_ref": "indicator--f2124b32-1995-437b-a30e-36cfd056de88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528c2f1a-a8e4-4142-89b2-a0d9c3ebf150", "sighting_of_ref": "indicator--db45310e-88c0-45b8-8a1e-81cb1a5cf742", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0bc76e-2b5b-4409-a8d0-fcd5e9a20506", "sighting_of_ref": "indicator--0e420d27-64eb-4f82-980f-507ae4d0e770", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e65be2-28a5-41dc-95c8-9cb6a903373b", "sighting_of_ref": "indicator--d9690fbf-ec5a-4a96-9337-8bd0a0b0e733", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3f84c9-bfe6-4f05-b725-b765fe8bd51f", "sighting_of_ref": "indicator--cbd3313c-d4ee-451c-b33f-0fdb6edf5d65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1abf17-ed59-48f5-b2b5-f04e1ee6a094", "sighting_of_ref": "indicator--527950fe-c5a1-4f12-a497-c3c25b385de3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56e6f6e-e339-44c9-a846-0880064ed8aa", "sighting_of_ref": "indicator--6bfe97ea-30e2-4b00-b638-7a326c3fbdf6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f211897-59d2-4ed3-82a6-0c4af16c1492", "sighting_of_ref": "indicator--0de9cbd1-0d8a-498a-86d9-f02ad9a2bdb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a138cb4-2239-4725-bf04-9cc6df041f7a", "sighting_of_ref": "indicator--381470d3-f899-47ef-86b6-bac015600f89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6946bc79-46ed-4222-a268-5a4538026a34", "sighting_of_ref": "indicator--5221b841-72bc-48d3-9dfb-2d0f9744e2eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082adbef-2691-4064-823d-507109aca0a8", "sighting_of_ref": "indicator--464a3bfd-f7cc-41d5-b075-e38d0c6d2366", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd47e15c-3fcb-4357-b780-39da4eca1d35", "sighting_of_ref": "indicator--4e2de2ae-fdca-4e91-8964-52fcaf415eab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6c2002-76de-4513-98fc-5a56b3e6d3d0", "sighting_of_ref": "indicator--a80a53a3-bcf8-4cd0-b68f-c2158a0d3ec8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8ba627-9e03-41b9-a4b7-c16c8a474724", "sighting_of_ref": "indicator--8300b339-34a8-4558-889a-9abd7ca230b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f124571a-78f7-43a6-a14f-20fe1f3708ba", "sighting_of_ref": "indicator--560203bf-3939-4393-b147-e1f91dd499e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e4c08e-e6b5-4e1e-a76d-0642c82d7f01", "sighting_of_ref": "indicator--b1dbf08c-3c95-45c3-bcd5-441d90d4f8aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e32e698-1fcf-4b22-afd7-ef064d655437", "sighting_of_ref": "indicator--17e19cdb-151b-48ca-901e-67fe702a1a49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e220da0-3fea-433b-93e9-0d80d3cfebd2", "sighting_of_ref": "indicator--b422eb2f-5efa-4481-8614-b536e6e2b6ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad1ec60-e2c5-4ca8-88a6-929ca7f5225e", "sighting_of_ref": "indicator--c2c301a2-5d1b-4e99-ab76-e37d7f63585b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968c92b-bcce-4437-8e80-f7525c8e45c4", "sighting_of_ref": "indicator--5343e88a-0122-4af0-9acd-b65979b67493", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28695a03-51d0-458c-9a1e-9a7314fa5de0", "sighting_of_ref": "indicator--e9755fd2-83a9-4195-9e3a-5bca724a379c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392fedac-1a81-4af2-93f0-112c2d5004d9", "sighting_of_ref": "indicator--a6528edf-ddd1-4950-824e-67fda5fe61f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139cc3e2-23b7-4eff-97b7-c929ee5bed16", "sighting_of_ref": "indicator--2dec37a7-6aeb-4fcb-b940-3e394a99f5a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550cde86-25ad-486b-a6c8-8d534fa0affa", "sighting_of_ref": "indicator--82870d4c-1d5b-43ab-9861-5f5ca6a61ddf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2401fe34-4e1d-45e9-90a4-2450252499eb", "sighting_of_ref": "indicator--82350fb2-a579-4720-87db-06fcb57ce2ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58b857e-9f74-42e8-88b1-0a6facc833bc", "sighting_of_ref": "indicator--25a4f50c-ef15-422e-b049-df17d4e394e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3061ee1c-9c64-442d-9979-15d26112752e", "sighting_of_ref": "indicator--8fa30b7d-d5c1-4532-813c-1dc9c59c3c69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623315ea-a224-4309-aa67-b799a65d1422", "sighting_of_ref": "indicator--9f52f636-bd15-4da2-98a4-44fbe686e950", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b44f79-2681-4f15-878c-2ef4e6fd9864", "sighting_of_ref": "indicator--247ad377-a78d-45eb-8b3e-a4498d057284", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28623ef6-9e3b-4157-bf6e-7638597adc6d", "sighting_of_ref": "indicator--63860126-a57b-4c3f-822e-b27f554a33a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c51974-56eb-4c54-845d-20e0905e0bf4", "sighting_of_ref": "indicator--3bb8fbca-0023-4b7a-a4d8-978835421568", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6268c95-17e0-4683-b33a-e531c2ff29d4", "sighting_of_ref": "indicator--a13461d7-1c80-4d24-84ca-c89e42079fde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f291ea-e962-4a83-bb56-2532feb0203c", "sighting_of_ref": "indicator--3afdcc46-b75a-4502-b63e-c9b1e0be5fd6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f5b27d-7921-4c8c-94e2-d6611665b648", "sighting_of_ref": "indicator--e5d3d787-65a1-4c0e-8e5f-c47dacec6417", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38ad376-c668-4f7f-a9bc-38b28a63a768", "sighting_of_ref": "indicator--2b37e493-bee6-4b4c-b0a1-0e4166c5e12b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff94d126-7f12-437b-ac21-b53f7f36a4c4", "sighting_of_ref": "indicator--cc5e3e1d-1726-4fff-a548-5854d614605e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71282d2-fce9-4eb6-8525-319d04265f32", "sighting_of_ref": "indicator--f24764d4-75c8-4d64-9e5a-89486a4567b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b06d0-a5ea-4b86-a98b-0f209bf7bf52", "sighting_of_ref": "indicator--4e4e7a6d-1234-4f8c-89df-846dfae90af2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9480b15-9650-4f12-827b-ac496f650fff", "sighting_of_ref": "indicator--11f48e92-3224-4b6f-ada7-6af5676f72cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1dcc73-f525-47e9-a1f5-9237b5eefcc3", "sighting_of_ref": "indicator--ed5834bd-06e3-4095-802d-819590855d3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c6ad8-9b82-4bab-8baf-9d081ec12a69", "sighting_of_ref": "indicator--7e4a857e-4b28-47ef-9097-96a9fc07f771", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76a55a-cc51-4f8e-b022-c4863adb07e8", "sighting_of_ref": "indicator--c51271e0-7ff7-458d-b51d-e45396dfdcef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49485fc-4071-4cb5-bc06-98ea647f2f11", "sighting_of_ref": "indicator--334d6599-5b7a-4d54-af5e-73ec5348f5f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7482decf-5545-4f3b-af72-48b92fe08cd8", "sighting_of_ref": "indicator--98d76389-a684-4a25-ab7a-e8dc8cf76e1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0396a31-1ad3-4ff8-80ba-7a3b44acf572", "sighting_of_ref": "indicator--cf4f8a9b-02b7-4b11-89e5-77e28fe3b943", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f418d26-53a9-4a7c-b0eb-686f5223ba55", "sighting_of_ref": "indicator--6e9b0240-940d-4743-8998-5eefca03d85d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545075e7-6a68-4690-9c46-4d11da8694ac", "sighting_of_ref": "indicator--384cfbb8-2cd6-4cce-b123-ef1fb5ff5e0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ec74b-38b2-46b6-abeb-63dd31f90a8c", "sighting_of_ref": "indicator--4e5d47b3-9ad3-4a7c-a2a5-8fbe98546797", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79717ebd-b969-49fe-ba2c-d937fa4238f7", "sighting_of_ref": "indicator--1b63dc25-a2db-44cf-8bff-932f80ecdebc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4f5155-db80-4065-a5b6-ed815b5c24fe", "sighting_of_ref": "indicator--b4a534e8-201e-4a8e-b050-af27703e6124", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069b3344-d98b-491f-842f-581ccadee995", "sighting_of_ref": "indicator--bf5bace2-f486-4c0b-b5f4-54301848c836", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab5b846-7bd5-4428-9251-1850311e31cf", "sighting_of_ref": "indicator--f9c83bd8-e985-40bb-b127-0cee2e30a663", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f365a01-87e8-49a0-9a58-d4b86cdc2dc3", "sighting_of_ref": "indicator--225df8df-8775-4d6e-8ba4-0eb546c87d27", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8657752-8d3f-4d17-92c0-a5781b042169", "sighting_of_ref": "indicator--3778a32c-951d-4ed1-b100-e8c169a36253", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c1ad7e-5337-4127-8c81-c2fc10d659f9", "sighting_of_ref": "indicator--78b05a20-f639-4693-82eb-50179382bae6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e164ce2-05fe-46c5-850a-deb343591751", "sighting_of_ref": "indicator--83e81fef-3806-49de-8647-01fa09dc874c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb8b70a-a08f-422b-96f0-aedb1fd40acc", "sighting_of_ref": "indicator--941f03cf-5624-434f-860b-e384620dfe97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e40a6e-6ecd-4af5-96b1-01f7783368fa", "sighting_of_ref": "indicator--ca7d182a-a7dd-4598-ab1e-5575518c64fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c68a27f-aeb7-44c7-a91a-93f668a39851", "sighting_of_ref": "indicator--33fe084c-d9f7-4f82-8f7d-893f12a207fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70cdd8a-76f7-4fe0-9f2e-b4115cb84239", "sighting_of_ref": "indicator--b31f7407-9b4c-46b8-8abc-4b3637774f49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6fb4ca-5bff-42eb-93a9-28078db82433", "sighting_of_ref": "indicator--027604d6-5a65-427a-ac6e-9f5b704b1192", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd00311-6682-4f54-a48c-77ae557daa88", "sighting_of_ref": "indicator--889cfcde-b7d8-4aea-b778-3c3fa382d7ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707fdf69-7641-4a5a-9270-8298759fca4d", "sighting_of_ref": "indicator--e1f75e8f-bcf1-45a1-94a4-35092d43567e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa8335d-b04b-4065-9520-0cb6257afd41", "sighting_of_ref": "indicator--09c19379-f9b2-4e93-9c11-f7f560682c87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc149b2-d40b-414d-958e-8034c3648fe7", "sighting_of_ref": "indicator--dd1a0e9f-d671-44cc-95ad-e81dc0c82212", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ff393b-f218-4daa-86ef-985739e1eb72", "sighting_of_ref": "indicator--d763fc3c-cd63-4a35-8cc0-e7b71b207515", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d609c272-51fb-48bd-baa8-b4643c534bfa", "sighting_of_ref": "indicator--3b106600-bfb3-4c3c-aed4-34cfc2d6d839", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f4e2d3-eb90-41e2-b292-eff40923d8f8", "sighting_of_ref": "indicator--56cb6720-408e-4b2f-b5cf-53838017cbfb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48ca58a-95b9-4584-814f-5b64bd6097e2", "sighting_of_ref": "indicator--ad7bc98d-0b82-4bf6-b6b3-cbc6550887d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde27af8-3172-4368-bd0a-c30f1f674c64", "sighting_of_ref": "indicator--a3f992c4-eeb5-41a7-a4c7-cf58070e1d10", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56120cde-93f1-404c-9ac6-551e762d606b", "sighting_of_ref": "indicator--bebb4147-83e4-47a0-9bfb-2a2aa5f61abe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d2914a-20d1-4976-8c4e-cadc9006a652", "sighting_of_ref": "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5676b512-6d4c-48b6-a72c-1c9edef88dbb", "sighting_of_ref": "indicator--b5374460-8c51-4f5b-a046-d9dbec52b8f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c7d315-a2aa-4d6f-9b3f-9ce65b9320ff", "sighting_of_ref": "indicator--4aa305d7-96fb-4ba0-8aef-16caab09d962", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dd302e-bbd1-4188-a705-6636d12b4afd", "sighting_of_ref": "indicator--93b191d8-9213-469e-8f4f-34b7015c296a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe47b443-c369-464e-aa68-45df9c1b066e", "sighting_of_ref": "indicator--82130a81-4604-49b8-a049-9555e9ad0d90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecfe2f3-b0b7-4267-a131-4d5a47138b07", "sighting_of_ref": "indicator--df24807f-7657-4b17-a06f-812a3976fdfa", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8d492f-0d3d-478c-b5d5-3f80c2129340", "sighting_of_ref": "indicator--7ef4a6f6-c7ee-496f-bf74-15f20cab5410", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979e6295-5b5a-4f3e-853c-d897b2be7690", "sighting_of_ref": "indicator--d9205ffd-f0c5-47ac-a2fa-6ab896fd5c50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa098442-a493-4669-a8dd-6e7e4deb7580", "sighting_of_ref": "indicator--e78a8bf0-002f-4810-a6ef-7f02b804d74b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721febc1-c401-4954-8a0d-4952723b3d08", "sighting_of_ref": "indicator--6fdaffaf-927e-482f-836a-30ad7edefeef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6fc738-e189-4f5d-8aba-a211b6f06eff", "sighting_of_ref": "indicator--e8422afc-14a8-493f-8b20-fe3f7cea8f0e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f05422a-325f-432d-9ca8-7d1ecd7158fa", "sighting_of_ref": "indicator--9e18f866-65b0-4b17-8f89-ce3149286175", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f30337-6430-48cf-8dcd-628eada36062", "sighting_of_ref": "indicator--fe277670-a087-4f76-a19a-2e52fbe28c8b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3a4a6e-8cc5-4800-97d7-e546fe97ce90", "sighting_of_ref": "indicator--5edb0e0e-a1b2-4c9a-9a30-690f6ddd65ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2145b84-2c58-48a4-bd35-34b8c992c5e3", "sighting_of_ref": "indicator--42ce88f5-3939-4ba6-84fa-88bbe4bafc19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c47682c-fecd-4ef6-ae82-fae2b4a6805f", "sighting_of_ref": "indicator--084df862-a2b3-45ca-8d71-49fbd34e91ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9206a88-0676-4f4c-9cbb-a47fbbefea28", "sighting_of_ref": "indicator--9dc411ba-25bc-412f-b22f-85deaac3a022", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d0c5db-6dab-4462-8585-0c5216ec37b4", "sighting_of_ref": "indicator--bf89e75c-4220-44f3-aa91-ac78720c8936", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eac64b-2dfa-4968-aaf7-4029b5014a72", "sighting_of_ref": "indicator--ff3e4f9f-dae9-4489-9686-76adda508905", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f368e8f4-7ee3-4fdc-b8bd-d1af7a6ca636", "sighting_of_ref": "indicator--08d4cf0d-cd56-47f5-9e9b-4e336d64d917", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f7242-9643-4926-a8fd-a5e4599ac0e3", "sighting_of_ref": "indicator--bc785970-8a8f-4d1e-84a7-96f0b707deef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd6589b-09b3-4590-bc09-6689d5b842a0", "sighting_of_ref": "indicator--e4d63163-419d-43ac-b5cd-799639cb7402", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abdc378-bfa1-4574-aecb-c9971d0a5224", "sighting_of_ref": "indicator--5509bd68-7d00-47fe-97ac-0605df2494da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bcd79e-2a17-4659-95ad-30e2af76d6dd", "sighting_of_ref": "indicator--3e33b78c-5bd8-41bf-865e-da31cefab598", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a55838a-8cfc-430f-8a9a-b22bb26785f9", "sighting_of_ref": "indicator--e0f84f40-1aad-4551-8f34-ba0a381d43b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d94d2f-23ba-4059-915b-bcceaac9bea9", "sighting_of_ref": "indicator--0de73409-56e9-406f-b19a-5f424df51b5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e646da-1c2c-45d5-a0d0-f032bcf28454", "sighting_of_ref": "indicator--1f8ff4db-b701-4cc8-8236-f6e166930196", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c3003-ddd3-47fb-8e8a-1b7ae8ff9a1d", "sighting_of_ref": "indicator--161e6680-8682-4020-a340-e97941cb40b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959485ac-f111-459e-9770-293d7f3f9d71", "sighting_of_ref": "indicator--902aeb96-ce52-4d9d-be30-7498925e304b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ac903a-d8d1-4d8c-b575-de64813efbe3", "sighting_of_ref": "indicator--fd566f95-13c5-43fb-9c5e-c2a081dab620", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b35ad-2de6-4448-9ab7-2e6f8247e5b5", "sighting_of_ref": "indicator--805e7436-7eea-4bc1-b85b-9a1b52c46323", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc29bb3-abb7-42bd-a57b-2d253a05295d", "sighting_of_ref": "indicator--b8b6ecb1-690d-421e-b101-c5f3b9142cb8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4531ec7f-c087-41e3-a62b-451b2b0d60e6", "sighting_of_ref": "indicator--30c48d4b-7e62-4ead-a2a5-9e011425c4eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29773dae-1969-4d88-a3d2-366eebc09779", "sighting_of_ref": "indicator--b7d6a5ae-9501-4b78-be3a-ea3a8586dc00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33c87c1-c311-44ad-ba3f-3f953ae5ac9d", "sighting_of_ref": "indicator--401ac347-7bf4-49e6-b230-01324ab2c2ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceab749-5a4a-4085-bf29-c1ac3bfaafd5", "sighting_of_ref": "indicator--8ecbee61-ff97-4c9a-8a7a-e8c20bb7ba79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9112a97d-6589-4065-8372-bdcdca0495fe", "sighting_of_ref": "indicator--e31d40e3-120f-45b8-994b-7cfa2f076ea5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facaf764-3912-46cf-94f6-f415a16c6901", "sighting_of_ref": "indicator--5e16e6da-539b-4332-8af7-eacda9eca4a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfbbe31-2d97-4765-994c-161d43a84fb6", "sighting_of_ref": "indicator--bbbf6376-95fd-4de6-a725-c6e690e6eb32", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e6ca01-53ad-4694-9635-78b97ba3fa95", "sighting_of_ref": "indicator--c2247fb4-ce0c-4e66-b56c-46d35eda3be9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f8e54c-1a00-4265-8d90-4d60fdb961dd", "sighting_of_ref": "indicator--3eab8e24-9a33-48bb-b9d6-aefcfdd19b0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041408b4-ea4f-4e14-a4ad-d4115263e5d2", "sighting_of_ref": "indicator--67688662-8649-4b5d-ba3e-a49638f6e356", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e14504-687b-4b0e-bb30-8018e6e96036", "sighting_of_ref": "indicator--9f7aed8e-b531-4656-8dac-59403e87dee4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc2c3b9-f9af-49e1-8641-c115c77a884f", "sighting_of_ref": "indicator--f12728b0-c6f8-454b-9ece-0a84539e3ecf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8797c6-5a05-4567-a4f5-cf376bdff2a6", "sighting_of_ref": "indicator--003fc00d-a32b-4168-9dc7-aca47e52d030", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfafdbec-494a-41e3-a8c4-3f980261baf5", "sighting_of_ref": "indicator--da2df8d4-d58a-4628-bb64-73036f6bb945", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294cc001-ead2-4f55-928e-604fe39ea827", "sighting_of_ref": "indicator--c394433c-59d2-4311-8fd4-082d885e2d4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426460cb-f136-47ea-a990-9a1ea4a94820", "sighting_of_ref": "indicator--d4b19127-ea96-4626-9097-fb0a9968c9db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50790e02-2440-40f5-8af8-69935052c2d7", "sighting_of_ref": "indicator--d59c7e1a-7153-4492-9944-9b0880abe271", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f047df7-f076-4050-96aa-a0435821cd2e", "sighting_of_ref": "indicator--1bd71882-8466-433b-841f-a82edc3c30e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391d052b-0f75-4184-92f0-35ce84288f72", "sighting_of_ref": "indicator--af4ceb81-5d70-44bd-a86f-d5a720214092", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cc7195-c789-4420-8c21-77b68a4710a9", "sighting_of_ref": "indicator--e4c59b14-0307-4c1a-9fae-267f8ef0e964", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b9cee-b3ea-4e76-b0a2-a73bd8227e95", "sighting_of_ref": "indicator--b31bbc73-5b25-43cd-aba9-c91e5d0c8076", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e216f462-f1a8-467d-bf84-19eae4d50ebb", "sighting_of_ref": "indicator--20aebd35-cecb-4cb0-8b6b-ad06f742e966", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8be9bd-fafb-4492-966b-0f76b524a9fe", "sighting_of_ref": "indicator--1cb0adc2-e56a-449c-bf6a-e2d624345c40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cd5338-b163-4c38-9d09-fc5c89a5e1ce", "sighting_of_ref": "indicator--f0fcf90a-6fae-4d20-a91e-335001907500", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef2ae13-8721-4e43-a968-8134f8906ae0", "sighting_of_ref": "indicator--e1d1a5fe-d771-4f90-81f3-b3d62e9499b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbd6896-ebdd-461e-8b79-2bb76c68993e", "sighting_of_ref": "indicator--6429224b-2579-47bc-813b-7a4a35f046b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44915bed-69f2-423c-8598-42b54f9bb85a", "sighting_of_ref": "indicator--ec8247ab-a8c6-48cb-8941-de96fe071fdb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa24ea4-c7d9-487d-8836-b83697f3a5bf", "sighting_of_ref": "indicator--bb670036-c8ad-4be6-a10b-ab610bff9b4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ca13e4-6a62-497c-91b0-dd3f31964983", "sighting_of_ref": "indicator--223a586a-aa37-43c7-b607-ea498a903221", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f8e996-de40-4954-8c7e-0b2fe5d4fe1b", "sighting_of_ref": "indicator--53163b1d-0391-4082-9db5-83e385e2eaa2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbd165d-f10a-4329-a61a-4f91a66b9e58", "sighting_of_ref": "indicator--1de7f839-835f-4aa5-a065-10a180743d50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7210e9-8cb6-4db9-94d1-81bce8b6ee09", "sighting_of_ref": "indicator--1f408437-5e18-4ffb-a855-25e0128800ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6c48e2-7b17-4ea4-9965-8f7b2caa89fc", "sighting_of_ref": "indicator--d7705dca-a792-4d92-9900-a57043d9fe4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81b43f2-a644-4b8a-9b19-5b70c341a874", "sighting_of_ref": "indicator--2207b6cc-51d6-4546-be4c-e1ab0d2c612c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf0bdb0-414a-4bbf-9cf1-9a7a0852e70c", "sighting_of_ref": "indicator--e5346a29-4674-45ac-bbd9-156bcc7f63b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bdaef1-6191-4ae1-ae52-5a7f37751555", "sighting_of_ref": "indicator--cb446984-2ef6-4b05-97f5-52b059d325d7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed3b7aa-9993-4404-a917-a82086f1d292", "sighting_of_ref": "indicator--b8e220be-aaef-4b16-a2ce-2280d51fc3aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee08f3-cb05-47e9-b668-122f5d6eba85", "sighting_of_ref": "indicator--c12a09e3-9599-443a-ab20-e08be6661009", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316c05f7-6cf6-41e8-8d85-fd271536d951", "sighting_of_ref": "indicator--d8706244-de0e-41ac-b40e-6f23ef24ae91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ac976a-0b63-4c05-966d-7fb52b3e3a6d", "sighting_of_ref": "indicator--fc886f0b-8611-4ad7-b073-5f46e260f14f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca958629-c4e1-4c4d-90ae-c7832215b352", "sighting_of_ref": "indicator--7423d919-29fe-4875-bea9-39a34fdd6907", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016d5272-ea94-44b0-b78e-f301e127687d", "sighting_of_ref": "indicator--ee33c9b7-17dc-4929-af17-7d53c8c0c13b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b1ec13-f257-4bfa-9dc0-fe741b65b18e", "sighting_of_ref": "indicator--b66035e9-730d-40e7-83f8-322d6af21ac1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200f37bd-86d0-4406-bbfc-d43162462d81", "sighting_of_ref": "indicator--e75fd185-3042-4133-80d9-c690bdb46a56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962be879-26c7-4a99-81fa-5bbbd1d587a3", "sighting_of_ref": "indicator--9c5d5729-f2c2-4898-a384-b7e1e2b5c338", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c7a907-7e78-4f4c-a51d-d60109147e56", "sighting_of_ref": "indicator--70f888af-0bac-4493-ac69-36ee739c0d5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f4d22a-d14a-4374-a695-a10dc808d05e", "sighting_of_ref": "indicator--6e57eea1-b99d-4d01-887a-26ed38f9746c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d249c89f-5d2d-4959-baf8-a3945ca87741", "sighting_of_ref": "indicator--6c3a987e-32d5-4ebb-ac51-40f98a558c7a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0483bd28-67b0-433d-a570-ffa1a08a9937", "sighting_of_ref": "indicator--a666a0a2-77bd-49d4-92fa-0597eab10bb0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1973a103-d920-4aef-a87e-429a72f83994", "sighting_of_ref": "indicator--373db4ca-3d2d-4b74-b909-716bcb6469a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49930790-92ac-4375-81ab-f04a7db7b531", "sighting_of_ref": "indicator--530db25a-9d73-460b-9320-e1efaaf26cea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101379e8-96f5-47bb-a5bb-397e56cb8567", "sighting_of_ref": "indicator--f4954123-9068-42b8-b094-3f9bebbe5109", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac435bf-6072-4306-9346-dada18c34b62", "sighting_of_ref": "indicator--55c47560-3a50-4590-b4cf-84a467dce8ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c16421-0330-425a-8a32-93ee8fc3ca65", "sighting_of_ref": "indicator--280069de-7926-4155-b5af-758957eb59a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581ae807-9269-4e31-9173-ad40702640e8", "sighting_of_ref": "indicator--f84fe19e-da88-49d0-a3c7-212522d00a2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253eeb18-4952-444f-a29f-6e9951ac7201", "sighting_of_ref": "indicator--40c881f6-ff46-4c29-b145-ef53f28d3257", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0269fe0a-2cb1-4eba-ba29-036ce1587719", "sighting_of_ref": "indicator--b6ec0509-b31d-44fc-b562-e0956149742a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9446034-d4c1-452f-84f0-898d68c7e4c1", "sighting_of_ref": "indicator--7b93e74c-f900-4e49-839e-2fb63d593218", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59676680-55e3-49a4-8d50-a7285333bbf3", "sighting_of_ref": "indicator--15a609e3-9933-4446-b175-9f76283815c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d6fbed-8b2a-4175-bfdc-9dd4e9112480", "sighting_of_ref": "indicator--6c7b2cc4-9283-4a32-b684-bc33635853ea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc196b4-ca8a-42d2-9a7a-900aeb660c3a", "sighting_of_ref": "indicator--301d6a1b-862f-4be1-831b-75f3d7e74382", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40335f64-c9f4-481b-9b85-c198a8011194", "sighting_of_ref": "indicator--f32fd31b-93c4-4e58-8c0d-762e39a4a688", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea680eb5-0688-4438-8530-0fdd8ff5ab60", "sighting_of_ref": "indicator--2b7732d4-a000-49db-be45-ec7642fa144d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec037337-cb8a-42b3-a715-94494ca09006", "sighting_of_ref": "indicator--b441e6a5-ca74-4c6d-9b30-b65cd381b653", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418b8a2a-169c-46c2-b94e-f50f0995f846", "sighting_of_ref": "indicator--1b9ce760-41c3-4819-9a00-2790669c4618", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3b503d-d834-4094-808c-77de48f3059e", "sighting_of_ref": "indicator--3c06f4fd-2433-407a-99fd-5cf45da087f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5918d78a-f5a0-4f0b-acb3-eca69bbe00a4", "sighting_of_ref": "indicator--bfb2c05c-64da-4fe3-9f4e-50d3b03a44e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f972e4-db94-45fc-b911-d01c09fa156a", "sighting_of_ref": "indicator--0344e387-5d8e-43b4-af27-b8520abbddd8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9127a8-2bc2-44f5-9744-87d1c846bd93", "sighting_of_ref": "indicator--5b9ad309-56de-4f03-aba8-bdbfa16483bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9458b50-e24b-4be8-8cc7-2250b64936fa", "sighting_of_ref": "indicator--c12a0560-baaf-47b1-82f5-e26dc5b46d01", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0aae4f-e9ac-41f4-8251-f8ce2b2f2df5", "sighting_of_ref": "indicator--0226ecc4-014a-4635-a89e-a01d76506895", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bde2ca-38b2-4144-983e-8b52942c347a", "sighting_of_ref": "indicator--d7ccabce-107d-4848-bc5f-6dce353c9b3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fa1c7c-3274-41fd-beb5-a99141b4c947", "sighting_of_ref": "indicator--2b221b12-c928-4c22-8828-539f05af6b95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf104f9e-dcf1-47df-b697-e7aceaba5ad2", "sighting_of_ref": "indicator--a19b1288-53db-4c46-93a3-78cd8fcc20d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca7140-8002-4bed-b340-e35a66c6da7a", "sighting_of_ref": "indicator--7446860f-f183-428f-b46c-59c30ad9c534", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2072e82f-3ac6-4a2d-a4b4-44ddfca11720", "sighting_of_ref": "indicator--be895787-6a94-4165-963e-9e5ba49a8475", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3bbf26-c673-49ff-8732-4b7f6614af2a", "sighting_of_ref": "indicator--6f6fd5b1-8d71-448b-9a58-ac3f75683655", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375d337b-e56a-4e3f-9dae-017d6582b6e6", "sighting_of_ref": "indicator--b4b47f64-6487-4127-91fb-71f4edaa6c26", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8113337f-e008-4243-8048-f25246f8baf9", "sighting_of_ref": "indicator--b2d1dee2-3ace-4b1f-af8d-622c8b223777", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20db33f-6462-48c1-ab18-382063a362e8", "sighting_of_ref": "indicator--51c915e7-0e93-49c0-b88e-a60495a5dc8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5255136c-85a9-4d91-983a-e61f7a594aa8", "sighting_of_ref": "indicator--f9b2d84d-0a0b-4971-9ea4-fb65cbbc06ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968c47f2-8436-49d2-8dae-9c11f9e7352b", "sighting_of_ref": "indicator--45348aa6-ca4c-40b2-8b02-aa10dc41e1c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd70f35-a718-46f0-b211-adadba9b0c1d", "sighting_of_ref": "indicator--2ac861b3-0d6f-4531-9fa6-b89eeb6c8b38", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f1fd76-2147-4a75-a92d-007ac836e392", "sighting_of_ref": "indicator--78255289-33b6-4548-9c18-e80ad68edef6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b46d4db-92ef-41cb-883c-e03a9953d4b5", "sighting_of_ref": "indicator--24f38d9e-2055-4eb4-a251-d728592681fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39729ab-6d32-48d8-bb8b-dd091a57cfaf", "sighting_of_ref": "indicator--32069bde-fb82-4502-9543-324b9e751516", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21996d8-b068-4214-87e5-1206bec9a414", "sighting_of_ref": "indicator--03d72d32-a030-4c63-a638-f9435006892b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0e7422-1da1-4517-8aea-a06847918b17", "sighting_of_ref": "indicator--eab0d2bb-c04f-4962-94a5-51cf21ae94a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f3deb5-4532-4ee8-a342-c91da3007b42", "sighting_of_ref": "indicator--613b483e-60d1-4ede-b204-e69bc40f3ff1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2714831c-8a7e-4210-bd06-b37806030dca", "sighting_of_ref": "indicator--b95d5d9a-4ce7-42c0-9ed1-dbaa283543e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1078b80f-7f5a-4e41-8345-1ea76709ac08", "sighting_of_ref": "indicator--e1a5cac1-3cb2-4751-b3ff-f2daa184842e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec4d90a-600a-4aa9-8755-a8875b384cd2", "sighting_of_ref": "indicator--55c81271-50ae-430e-b7c2-cbe56fd8c2b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dee7f1-b14e-4212-bed9-68315b550df2", "sighting_of_ref": "indicator--faccaa63-52c1-46bc-8e62-f1236c48cf24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c705b4b9-9c1a-4ba3-a136-a6d865e876f4", "sighting_of_ref": "indicator--04f80840-d0e3-4415-938b-9ffc685a1614", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38818a1-529f-4804-93f3-32f2792ee0d8", "sighting_of_ref": "indicator--3f2705c3-0aa3-4fec-9e26-8cd99d12ae0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de428801-e2ee-4164-b92c-db22940b6a00", "sighting_of_ref": "indicator--5cd21ad9-3f6f-4194-a9ca-181c2f6dca5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cfac7e-b041-4127-a57e-c28c5197d990", "sighting_of_ref": "indicator--9b307210-9672-47ca-b828-7b6ac9df5e8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6d75b6-8c3e-4914-ae0a-42d219778bfc", "sighting_of_ref": "indicator--dd74d5fd-dd9e-4358-89f2-62e785197b79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e728ee7-fd6d-4ec3-a2eb-f059cc1d5d9b", "sighting_of_ref": "indicator--1457ae64-6df1-4e87-9cd4-a66d277088f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf52fd86-e56f-460e-bf83-7ed0e5f33b72", "sighting_of_ref": "indicator--3d52e8b8-c2f5-413e-a9e0-94688507ae53", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4393dd6a-97d3-40a0-8112-bc0fb81b25b9", "sighting_of_ref": "indicator--77f61b81-6ff6-431c-b1c9-303344ca5ab0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a5afb-2d7a-46af-b786-5345bbbb27e0", "sighting_of_ref": "indicator--48f475dc-3594-4dfd-9349-03399275369a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac2ff8f-95b5-47af-91fa-a82288b6ad93", "sighting_of_ref": "indicator--55bf2701-0e2e-48b6-a10f-82f484cc3bcf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4575c2-e86d-4860-98f0-a5991fcbb8a9", "sighting_of_ref": "indicator--97bd2cdb-d5d9-47e2-945f-23bfa6a65ad6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c909960b-69be-485e-96ba-a4e01734d1bb", "sighting_of_ref": "indicator--53d0975a-3c74-4626-8a1b-ad625491cc60", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaf03e5-7a2d-4fe5-b4c9-43a890f1e014", "sighting_of_ref": "indicator--04e75d97-c1b5-41ab-875e-8a434c9dcbff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36352d1-f455-4364-a8e8-fe3f55b8ad5b", "sighting_of_ref": "indicator--c70eb764-c1d1-41fb-9d17-655b485ae2af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c77398d-7439-4ce3-bf43-628463ad857e", "sighting_of_ref": "indicator--1bf2094e-ef7b-46db-a5f9-e5d0e3e10435", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197f048f-08e6-4b5e-a023-e736eec2fe0c", "sighting_of_ref": "indicator--b8f9b44f-8897-4770-9396-140b9017833f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cd983f-1691-4cf5-a991-682a66a158e7", "sighting_of_ref": "indicator--1b01059d-ae36-431d-8a5c-4bed63d81539", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba800eea-df61-4782-b6ea-f3ec0432be4c", "sighting_of_ref": "indicator--de002fbc-ce08-4d62-bd4f-a0e6f2491869", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581a536e-cada-4714-aff6-5bf4db207765", "sighting_of_ref": "indicator--5a900234-0ec0-4de8-a0ba-cdc8bf972aa0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550627d6-d247-465f-bffd-784609995068", "sighting_of_ref": "indicator--8bab3f56-33be-416c-8285-b024f0d0d03c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db238f0e-7271-476a-9a7c-1fda29afbe11", "sighting_of_ref": "indicator--f694c830-e2bd-4aef-acd2-fc1b984840cf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59165ee0-39b1-4c87-8665-70b84e511850", "sighting_of_ref": "indicator--06e47076-a637-4f79-b18e-e068d0eb944a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d334ba6-14f8-49dd-b020-abe4a8ccc4a5", "sighting_of_ref": "indicator--7d792c3c-7602-40da-b9f4-2c0fefa1a9ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c78138-47f3-4e7e-bc75-60a7487c0367", "sighting_of_ref": "indicator--27268cf6-8105-4e0f-bc9e-538678ca8af9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ee57b6-0390-4a15-a124-3ca53b2227df", "sighting_of_ref": "indicator--f570db26-6827-47a1-ba2f-4ba3bc1ec1c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868ac3f6-0498-4e2a-96e3-7326c75f7292", "sighting_of_ref": "indicator--aa826ef3-743b-4d6b-968b-012341d46da6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f398e279-1890-40e1-bccf-7d7bba37378e", "sighting_of_ref": "indicator--61ef6f4c-09a0-4100-a08e-d1d8a8105200", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbd9f6c-eb74-423a-ad4c-a6a260a3f21b", "sighting_of_ref": "indicator--5601ef1c-b79d-4ceb-9018-17edd68a323f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a9bcac-c1b5-4f8e-9324-4477d7f4c2ad", "sighting_of_ref": "indicator--424cc21b-7b7c-4da1-a5d7-ad19197b6112", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cd537a-02cb-4964-897d-13ec5bb8e3b5", "sighting_of_ref": "indicator--2d9809e7-3552-46d3-aee0-f3484631a94a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586a1edf-a7b1-4369-a924-ec33d7108a3f", "sighting_of_ref": "indicator--52d4630b-a50a-4a62-8e5e-c4e66058bffe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f433ecca-868d-499b-8554-28a6eaf59d72", "sighting_of_ref": "indicator--8cfd8188-1f3b-4b81-b7f1-c09a66eac3ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ee428f-4d09-4e50-ba85-93e12087321b", "sighting_of_ref": "indicator--34043fb1-a847-4b77-b517-15ffe9d4b1d5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131356d4-31a4-4609-9f04-5d4bebf2b424", "sighting_of_ref": "indicator--e08a5af6-082d-423b-8e5b-86a9e340dc0b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7075e5f-4874-4805-ba8e-1b496e79e179", "sighting_of_ref": "indicator--0f5e3d05-c71f-46a9-962f-3f3a8dcd6f57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73b0a67-395e-48bd-a329-8e413cf7bb84", "sighting_of_ref": "indicator--7140b37e-3a97-4e85-ba3d-ff25806a24bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03981352-cea0-4496-ba79-73f555645809", "sighting_of_ref": "indicator--2d42abb1-7022-4f54-a015-c29998ca2321", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bcde1b-0ca9-4d7c-9b3b-da24c6390d6b", "sighting_of_ref": "indicator--143f7666-4fa9-4078-bb38-e52bd6ed2af8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3dd0b7-dd9d-4480-8826-9f6768eaed9e", "sighting_of_ref": "indicator--ef5777f9-871f-4a39-ba69-b1baffb87470", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df42f7cd-fa4a-40ba-b688-d5defd2f3f9c", "sighting_of_ref": "indicator--d4981f16-6ab7-4fd8-a0f9-9dd48d75abe9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26039370-b84d-43c6-bb87-18e89555cf0b", "sighting_of_ref": "indicator--c769e1f0-213c-4e78-8e6f-779fbe4a96fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb00264a-139a-4a9c-bb8f-ecce775af570", "sighting_of_ref": "indicator--daef4126-66aa-466c-b4d8-401377ef5bdf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b758a4-2879-498a-b450-cec659dda2bb", "sighting_of_ref": "indicator--465325d6-c86e-4ffe-a0b6-859c2105b391", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48c947d-6777-4403-b98f-3eb5d6a61c1a", "sighting_of_ref": "indicator--281dbbdc-b7e4-43dd-a295-ae0cf585cd1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c79e5-d346-4c76-9d1e-58e520d5ec8a", "sighting_of_ref": "indicator--da1ecf9c-c6f5-4856-b12c-29fb3af89892", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f932eb9-a9ce-49f4-8d53-a9903bfa0251", "sighting_of_ref": "indicator--87121f01-a46c-43dd-9dc1-c9237efbe75b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533b578b-8f24-49d3-8f05-9784d624b2e6", "sighting_of_ref": "indicator--8cfdf915-7a38-4d26-8245-548b3126f28b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8533ee7-a7b7-4528-ab5f-ebd4ee0f375a", "sighting_of_ref": "indicator--7d3c6cb3-b8bf-4d1b-8ebd-62bce6465ca9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83720a7f-f4d7-4464-bfb8-6d2f9bb2a604", "sighting_of_ref": "indicator--7c2a247a-0933-4cad-9cc8-50caf66f9772", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6856d591-62f7-4904-b694-913cf61aa0c9", "sighting_of_ref": "indicator--6b6915f0-a826-4775-b539-4acafe30d462", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36d7497-6d8f-4e0f-ab11-3d88b3e1a829", "sighting_of_ref": "indicator--60dbb044-f9af-4954-8636-833a69a0d4f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bc8738-9490-42bc-9320-6ac85010d11f", "sighting_of_ref": "indicator--933aadcc-1bd7-423b-9b63-cc19393372a3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb39d86b-de7a-4ac9-a1be-31b539459ad0", "sighting_of_ref": "indicator--91cbd22b-5ee6-4ec0-8869-386178b3b996", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cd3baf-532e-4575-879a-339c95d965fc", "sighting_of_ref": "indicator--4cd47409-86c4-483c-8422-1c376651b21f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf75a1b6-ed03-4aef-9d70-128f5c92086f", "sighting_of_ref": "indicator--adf9d5d8-1db1-469d-85d3-359661d9cdda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc04c45-a243-40a6-a5d6-c39f8076ae1c", "sighting_of_ref": "indicator--a543e035-b733-4986-b0f4-cfada2f89d3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eca879-46bf-4947-b962-2c48f68d8d1e", "sighting_of_ref": "indicator--855277c1-dc73-48f6-b653-1c99dafc5e91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23716f4c-a049-48b2-a987-43a3e593b05a", "sighting_of_ref": "indicator--6ce72337-a536-4626-860c-e3d0747dd2b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a73a65-1a7e-4743-a8e9-495963b9716e", "sighting_of_ref": "indicator--53b13631-9818-4edb-88a0-d75d7aa2dfec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeeb52d-8c3c-47ff-b86d-0f7ee9e775e0", "sighting_of_ref": "indicator--706c679e-903b-4651-877d-c572e0caadc8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df85b51-0176-40d2-b0a6-76f0a1b6aff2", "sighting_of_ref": "indicator--94264675-e64a-43d8-9ac6-a694f0daeed3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc4465f-ab9f-4c09-bc2d-9af7d42f9206", "sighting_of_ref": "indicator--61528ed5-7b72-4a0e-b73e-960710546074", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae3256d-8c1b-482b-9ec0-31cfd949af11", "sighting_of_ref": "indicator--7801c8c3-c6b8-4ada-bc4f-f1a0957b001a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019240af-0d65-4d3d-9022-df3be6435771", "sighting_of_ref": "indicator--79ada37b-c518-4ff1-9875-b749aec814bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdfd70f-b22a-428c-be55-3a5e838ed5a9", "sighting_of_ref": "indicator--c786e50e-be73-40ad-9b24-0bef677c0221", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e649cbe-d74e-4dbf-87b5-3e316987f39e", "sighting_of_ref": "indicator--8c5e482f-aa2b-452a-ba80-cb2b33591aba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73054b34-0539-43b9-b345-2e5fe609267f", "sighting_of_ref": "indicator--4911ea99-a049-4359-9db2-bf95e10d9584", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15060f73-1b23-4375-8bbc-25e6c4cce312", "sighting_of_ref": "indicator--23fe8131-5b32-4b27-9abd-0fde0a7cac5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b058131-be79-4ec8-8d65-22bc101e94ed", "sighting_of_ref": "indicator--215b9210-f944-418a-ad5e-3df20f06d98f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35322671-b7f9-43ef-b785-275561ca1187", "sighting_of_ref": "indicator--aea439df-b80b-4839-a574-d12a38ad07f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8c3863-185b-43c7-95df-0dc698742ab6", "sighting_of_ref": "indicator--c5065d6e-8644-4714-bece-699b26eb2365", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f440a242-007a-49d0-a303-c7b51bda2037", "sighting_of_ref": "indicator--dbe99c29-f240-4970-a605-84b02a421244", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71e2a8a-648d-425c-a42c-55e3c1c0e093", "sighting_of_ref": "indicator--ab3dd661-e41b-4ed8-91dc-9b11c198d5b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6906aee-2d94-4588-a1ef-5be43e661c1b", "sighting_of_ref": "indicator--e94d54b4-3ea7-4623-8b43-a69f114447f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9168314-8e31-4987-9313-69ae734f88c8", "sighting_of_ref": "indicator--12382c23-5989-4cca-a396-b5b51ef1dae1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105404e8-09fb-4294-8c54-35387868957d", "sighting_of_ref": "indicator--17eba5df-330d-4c19-84a6-afbb80f6834b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d3a531-2612-4649-9c68-de4b4497cbae", "sighting_of_ref": "indicator--0a6bcdb2-e11d-46cb-b440-65ca1b893f85", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513d1299-a5dd-4f28-a64e-6c8a98243c5d", "sighting_of_ref": "indicator--d122849a-da12-45d4-bacd-f6c344a74eab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab4831b-5e5e-4caa-a64e-450f3787cdb6", "sighting_of_ref": "indicator--1ac10ce8-8ed4-426b-894b-c38be604f784", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d2e83b-029e-44f9-98ce-01d249691335", "sighting_of_ref": "indicator--007a1a1e-46c3-4cce-a69e-3e56accedf8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bacac11-450a-489c-8f11-fb4a58cd19ad", "sighting_of_ref": "indicator--6bf6f3b6-71d2-40d5-9a1a-925cd156dc29", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1177075e-60d5-4846-9fe1-c164a77aa305", "sighting_of_ref": "indicator--71d73a9a-1b22-47bc-803e-4cbf269c52b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a15c24d-531e-4a41-89b8-34796f9e63cf", "sighting_of_ref": "indicator--b0b9b0dd-9e7a-4b44-818f-e49eeaaba87b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec794cc-3404-4c50-8a55-a6b392805d26", "sighting_of_ref": "indicator--1c624055-c688-4ae2-bc64-f6409c7a3b10", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eb0ddb-2830-441e-a345-f490c6cf9854", "sighting_of_ref": "indicator--896c0cd4-dcd8-493b-aa7f-02fc72fdf198", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca607dae-54e1-4510-a784-0d03eaf0c813", "sighting_of_ref": "indicator--9448767e-2137-4b17-b840-b8f4a9833c26", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a83807c-8556-4996-973f-ca0533c650e3", "sighting_of_ref": "indicator--670a1ef4-30ca-46c0-a1a9-6583b36a048f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e77264-6594-4e3d-bd34-7e5d2e3efa77", "sighting_of_ref": "indicator--fcf789cf-abc6-4288-8d60-f6f45ce49dfc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da9344b-e120-48fa-8dba-f35e73c004c1", "sighting_of_ref": "indicator--95f44ca5-24fb-4794-86f4-5e0afb5f655b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad35d4a3-6a0b-4f96-b878-6b4296b17030", "sighting_of_ref": "indicator--6e8d6e63-57cf-4591-8eda-d0259619eca8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f769bdd-15c8-42fe-aac6-ba9af89c33d9", "sighting_of_ref": "indicator--ed098b3e-02fd-4a9f-8b71-44f1e2f0f442", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea16bab6-d623-4e71-83df-74901b7a5336", "sighting_of_ref": "indicator--f4f3a089-e7a9-4650-8ae9-10264fb66700", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa8bbd9-12e3-4301-b611-6a3f82e7e797", "sighting_of_ref": "indicator--a2be5ee5-12f5-4f96-a371-cb0ec9f60535", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9172357-ddc2-4e63-8875-cc3d66fd5b35", "sighting_of_ref": "indicator--dfe00cea-fd09-479d-8e3f-2da59c61dbbf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13d77ba-0cba-48a4-adc9-9421826fea27", "sighting_of_ref": "indicator--03c92937-225a-4b1b-984a-eb64fbdf268a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cd4b2c-f40d-435c-931c-6cebbc62d474", "sighting_of_ref": "indicator--791b3792-8a45-4139-9e43-fc942260fc68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b90ba39-dcd0-43e6-a992-861eb6ac700d", "sighting_of_ref": "indicator--9c44ee1e-4452-4d4e-81ad-cda047cf4bec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4aec73-6f0b-45d6-b6ee-8b953403ba2a", "sighting_of_ref": "indicator--085849c7-8712-4d23-b6c7-a586d43bcb6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5034d0-c92b-4322-8ba9-b2b248d9e5db", "sighting_of_ref": "indicator--ed9def40-8e8f-4858-87f3-b027badac546", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9f6bc8-19d1-4023-bba4-ae5a4469fc06", "sighting_of_ref": "indicator--48956686-9557-4aee-a84e-2d57959caaf4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4717000b-f522-45d5-b07f-f7b9c7b0b3fc", "sighting_of_ref": "indicator--6a666f0f-529b-46d0-ba4f-ff1058f720f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23d338d-caf3-4e20-9446-70be98b7a11d", "sighting_of_ref": "indicator--91dac82d-c7bb-4fa1-bcd5-a718b7bb65f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bcebea-e880-4f24-9b66-64fdd5de3211", "sighting_of_ref": "indicator--9e9c011d-e36c-4fc1-9e3e-9845b95e3e5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c7f2cf-4edb-498f-bc2f-46ac5abee376", "sighting_of_ref": "indicator--77878472-3d15-426a-86d9-8e9870f30803", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ad2a60-33e0-43bd-94c5-fc1b01df343d", "sighting_of_ref": "indicator--cc451e25-c4ed-4390-ab76-0313ecbac397", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a868599d-cdfa-464c-ad74-9bc80d182917", "sighting_of_ref": "indicator--ec053630-63c7-45ab-bef0-b4893f29b6ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fd2add-3d3c-4cc2-b551-8c2efc293809", "sighting_of_ref": "indicator--8ddfe284-3446-445c-bd7c-ffa4f2f4ac87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7849a182-3af4-4e4f-bc7b-6345fbab69ed", "sighting_of_ref": "indicator--4bc4d221-dd8d-4633-8604-d329670ee2fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a8a04d-1498-43c6-9615-870b06a10355", "sighting_of_ref": "indicator--20c892a9-b06d-4934-8ba2-21788165247a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a52460d-2f02-4584-94ec-de0acf05de77", "sighting_of_ref": "indicator--b38b1a74-82e0-41f1-9c0e-baa82de0b160", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085066b8-101f-4a6a-b271-00e7a3f8b882", "sighting_of_ref": "indicator--85f6f848-a22e-4eaa-8788-bcb8c8f8af58", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7998e0f8-92c9-4387-b0bc-b74b9167c4d9", "sighting_of_ref": "indicator--4cbbb37b-39eb-49c1-9aea-38fa1f6663ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1c377e-8165-4eef-ab35-d5579c03c427", "sighting_of_ref": "indicator--330ba3cf-bb86-4060-86e4-7a0b653b3b06", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90a46e0-9a6c-405b-af75-5429de9fbf11", "sighting_of_ref": "indicator--3465f8f2-fb82-46e1-86ba-d83f113f087d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eccedc-af56-4b98-a31c-6cea6dc77fcc", "sighting_of_ref": "indicator--9a604a32-d83b-4977-bff3-c016fd352d5c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec70d10-5c5b-44ac-879e-4a9acf8320f4", "sighting_of_ref": "indicator--a5d1b4fc-0bac-4092-9373-7df3d7c9e0b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e8d9b-a6f2-4c52-89af-3513c42c3590", "sighting_of_ref": "indicator--59c41659-5003-4dc4-ae6d-4b1ad8667610", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81eb3262-d64d-4028-8a17-94d4c79a717d", "sighting_of_ref": "indicator--468dfa83-76b6-4376-8565-8548fa66f855", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb2bca9-2a15-4b14-9e4e-1fe060594be0", "sighting_of_ref": "indicator--209bbdec-a0c6-4025-bde2-68d0784da7ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc564a-ba9e-43c0-85a7-07a238d1c745", "sighting_of_ref": "indicator--3559408c-8e82-498b-8d05-29f708d98b58", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a25184f-a43e-41e7-aef1-3152b254ce34", "sighting_of_ref": "indicator--07e41102-fec9-45cf-a537-566d05cc2110", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4073f568-abfd-4372-82c5-bfc638227573", "sighting_of_ref": "indicator--d6113ad2-ec94-4040-af0d-74228a5dc3f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98362f4-1c8a-40a7-8e32-cfd51e1f0641", "sighting_of_ref": "indicator--0adc7797-8ee2-40df-9d2a-18564336ad67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9083f1-d210-45e7-80bd-2f4ae98e5d8e", "sighting_of_ref": "indicator--42667b25-2781-486b-b9f3-2a47c9f2535b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d91d61a-a7a2-4bca-9da7-7fea90a3a160", "sighting_of_ref": "indicator--325d814a-4c93-4c12-adaa-40fe207f2e37", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cbb120-c886-402f-b547-e297a401092c", "sighting_of_ref": "indicator--83986f22-b166-4a4e-8747-a9f214c2f319", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38582a8f-d77f-48ca-be97-694a866e32b5", "sighting_of_ref": "indicator--452b1bbe-13de-4f16-aba3-c3b5221133b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13b1dab-93db-4714-bf32-cff2e2b1a25b", "sighting_of_ref": "indicator--e553a02a-90f1-43a3-a612-7e631bbd215c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b670d532-9f29-48f0-8a0b-a39cc296aaba", "sighting_of_ref": "indicator--6c087b29-3179-49b5-96e3-b4544a62af0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a272f5c6-210a-44d7-b58a-025ef922e95a", "sighting_of_ref": "indicator--890b27c1-4831-41a2-88b9-9da074e2f669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82aab9d-0da6-4319-9353-bb83f3187d38", "sighting_of_ref": "indicator--2fb13a23-3ffe-4fe1-87d9-3db16f1e25db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dde1364-f3f1-4767-a3f5-b40f7cf2f32b", "sighting_of_ref": "indicator--ad212aa0-f227-4cce-8a5c-55059acab60c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf0c004-96cd-407b-85dc-9f83ef85e899", "sighting_of_ref": "indicator--83e6a413-6ddd-4474-9a00-27d31db3c243", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4103edf6-5716-4f18-b727-f4ccff255c37", "sighting_of_ref": "indicator--223ba42d-7806-4102-ac3c-e5703f023645", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1106e2c5-b11d-4a03-af1c-dfa2e6825bc9", "sighting_of_ref": "indicator--5534ca3b-7bb7-42dc-a1fc-41fb67c31ae4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95540e7-054d-4f23-acda-e8d45d917797", "sighting_of_ref": "indicator--059f439a-dee3-409a-9530-aafb363ee672", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db22f3ba-ff04-420e-9405-4f700d569f83", "sighting_of_ref": "indicator--6cd71562-e816-464c-96df-9ebd8d50145a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f7d98c-adfd-4ac0-bc59-22e4852a90e0", "sighting_of_ref": "indicator--fa434dbb-2b51-4565-8d76-4d77a79a67a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31886f4c-c507-45a4-9495-3cc859ef0dff", "sighting_of_ref": "indicator--e0f810ea-67fe-49b6-8dd1-c54c2f2b14f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f342472-f699-4c90-9bde-f2693e8b4674", "sighting_of_ref": "indicator--4d472c85-9924-4a6f-ab4f-574a3e503d09", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586fd0ae-17d0-44cd-b684-1d78877bd7f8", "sighting_of_ref": "indicator--75e45c3b-5839-4700-8724-dd0556cae64d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d833a919-c42e-4050-9f94-b249e84357bf", "sighting_of_ref": "indicator--8875af1c-2110-455b-a2c3-2ab7593c533a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e09b9-7026-4379-af17-7f3313d01efa", "sighting_of_ref": "indicator--50cb109d-df94-4366-ba74-9e59043a1a4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1165dda-e077-4e1a-afec-552b56edad00", "sighting_of_ref": "indicator--c69e5e17-4d7c-489d-aab5-a05857553753", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48c5aea-9d34-4697-af37-762a4d6cfb76", "sighting_of_ref": "indicator--7d786873-a3ef-4d14-b662-24aa226ba989", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade24c5c-b695-4fe9-9749-512a22697a1c", "sighting_of_ref": "indicator--86657e7a-3742-4601-b26a-53c85599df2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b8dd07-03e5-45eb-9fb4-4bcdaad6e988", "sighting_of_ref": "indicator--97ec1280-f632-4dc8-9ba0-2f355e63ae6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef253ea-73ce-4bf5-887f-eeb96b71bae0", "sighting_of_ref": "indicator--ffe46f0a-a9ae-42b0-a74e-efaf94553710", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2166a861-af6a-4025-9c66-f6d6a24fb3c5", "sighting_of_ref": "indicator--f4333409-c13d-44e6-8e10-0147dc7726ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee61cb42-f144-4f67-a86d-1f4e0efc464b", "sighting_of_ref": "indicator--0c3aa3a3-49de-4f21-ac25-a8999fb05dd4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7a3ed9-5d92-4cb8-aa52-f0d04f1f4d2f", "sighting_of_ref": "indicator--7373b090-3be2-47d6-b513-a6b0ed14161a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1873aa-a8c2-4b14-a29b-a2e8295a6302", "sighting_of_ref": "indicator--e8cdb17b-024c-4196-ae4d-37aa71b8b14b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3861c69e-f46f-4a8a-8431-00d38905abfe", "sighting_of_ref": "indicator--9911bdbb-6bff-4ac5-b28e-f13315af575a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cb1078-f9b4-4272-a365-c5b7cc135ebf", "sighting_of_ref": "indicator--f8038e69-97d7-485d-b8d2-4af58119bdc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb173a6-fd09-4f43-a26f-d0fbea310240", "sighting_of_ref": "indicator--1b275034-86a4-4628-af22-257a587e6202", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b51bbd-13ab-4e84-af2d-13a1acc495e4", "sighting_of_ref": "indicator--df2e7c4f-e5f9-4833-94e5-1d48fbd71338", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21ad24f-b256-43d8-94e9-cff4d2a92667", "sighting_of_ref": "indicator--06b55da9-f844-4a1a-a54d-427fb1537414", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04cb287-09ec-4243-a24c-269703bb8f52", "sighting_of_ref": "indicator--c113f5f0-a7a5-4dbf-a5ca-fa8d12a654f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c826a8-58b0-4da1-85e6-6398da9c95a0", "sighting_of_ref": "indicator--7e37bf60-3d9b-4f44-ac7b-4d8e69c250d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911f3d10-c77f-43ec-8ed2-df22a479dcc2", "sighting_of_ref": "indicator--95474412-cae8-4929-86b9-e218fcee06da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df1ed44-27c3-4440-bfd0-6fbbc152fe35", "sighting_of_ref": "indicator--7e23c8e1-2bed-4d60-8534-37725508b00a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3a681c-fe33-4ab9-959b-d7162bbb7a1c", "sighting_of_ref": "indicator--6a3c9448-a84d-4d55-8025-8dceb1d7c934", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72863df-3d7a-44c4-a39f-e4aaae77d3df", "sighting_of_ref": "indicator--d23491f1-89ae-4ea7-a547-bf4860f3852d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7e2a90-6fe9-4b1e-8ed5-ae5f9fb6e4ba", "sighting_of_ref": "indicator--d62aa172-1c39-4b48-ace8-67ad024a87a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44b403f-9353-4c9e-bf0b-9e4962fd8873", "sighting_of_ref": "indicator--1df65c9d-8eb8-4bb6-a390-693e9825a57d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578b61c2-93a9-4993-a1d0-b2a41acd3a91", "sighting_of_ref": "indicator--755c6cd8-781c-42ac-bfca-d7c4cab24dfa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247204c-12b1-4328-b5ac-3708322d5dc8", "sighting_of_ref": "indicator--f22688c0-4e96-4087-9b1e-90640f4f2eee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e567586-52ed-4077-9ca9-50286caef5b7", "sighting_of_ref": "indicator--6d1ce274-b91c-4440-a72c-8d18a00242e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb28ebe-2ea0-46ae-99d3-91a846c1205e", "sighting_of_ref": "indicator--e1ea5e90-e53a-463d-835e-4130a728b07d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9496159c-cbc7-43fd-b765-cd66339ee278", "sighting_of_ref": "indicator--a6a61924-18f6-424f-86ed-89fcc22208e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678a25c7-448f-4c19-8989-a44f6528b07a", "sighting_of_ref": "indicator--e360e25b-b4b6-4fdf-9d24-3af9028fdc60", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39640f78-88aa-4d41-bd36-2170a6a9e657", "sighting_of_ref": "indicator--fc7b95da-264d-4fda-9735-d7e5cc881a79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593a53df-fabe-4f3f-a59d-51d845480add", "sighting_of_ref": "indicator--020f901c-ea99-43ab-b21c-869a8b7ab318", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a828b6-ff27-4cab-a8f5-628ee980a148", "sighting_of_ref": "indicator--9bd227d0-c0b7-45ba-8c17-0a80156d8955", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6098880-7fa9-4d9c-9a87-429ae7968fbf", "sighting_of_ref": "indicator--13d6bc05-78b1-445d-99e9-d90910129bb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bfaa39-55cb-4e18-ae6c-60992fbe46bc", "sighting_of_ref": "indicator--40a597d8-a4e5-4670-8005-e16ffc1a38d5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedfd4ee-7916-4715-992f-9a1b5e16f6b6", "sighting_of_ref": "indicator--013ce218-a2fc-48a3-81b0-3aa957664276", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b176ed2b-cb76-48d0-a7a6-f7e16c311d8c", "sighting_of_ref": "indicator--ddec0257-0ccc-4b8d-90c5-e82ec8128e04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d8c5dc-5753-431a-a546-0322ec8fd268", "sighting_of_ref": "indicator--52f9a614-c92d-41bf-87f1-51180e0cd142", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f488fb6e-9021-4ce2-bf01-899cce4d1c0a", "sighting_of_ref": "indicator--cba9f338-0f89-4434-8297-f9e14b9b6a2d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604c0f4a-8b73-489e-b697-0e54f13c160b", "sighting_of_ref": "indicator--fca421af-1abe-4dca-9a3b-12d87d1b52de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30282017-b18f-47f4-8146-c7eb6ef056fc", "sighting_of_ref": "indicator--f0727915-f1fd-467b-8198-d8867eb1043d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9efb005-0cb9-4da4-86fa-0476d2e099f4", "sighting_of_ref": "indicator--4fc6e379-368b-4156-ac8f-dd5834a045c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d07b58-b221-4c08-a7e7-e458fb996722", "sighting_of_ref": "indicator--60a4dc6f-2b90-471b-8c41-cf62a0c9b971", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc2e912-5db0-4956-bdcb-fc091c140cc0", "sighting_of_ref": "indicator--1e01cb28-e394-4e71-8752-b00941ceb1e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc9230f-a072-405d-90fe-228a77449a0d", "sighting_of_ref": "indicator--abcbe63a-0ad9-4bbf-93ed-25cd8e918ef1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdc85eb-bb10-4c10-9aad-79014305d2d8", "sighting_of_ref": "indicator--6daee0db-eaf2-4320-bd3f-bf6824912caf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42287cd9-094f-46d5-9b6a-0c2f1e094f36", "sighting_of_ref": "indicator--2186e981-09ce-426c-a9f8-87ac76b720d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa07d437-c776-41ea-99ae-6b3ead286508", "sighting_of_ref": "indicator--ddb0f45a-d7ac-4a9c-85bb-414ed98c6b4d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaa53ea-8a98-4670-a4fb-a10c52b5ccef", "sighting_of_ref": "indicator--bbfd7d46-63ea-4e28-ab55-a9030aa8b2b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd95c3c3-f742-4e90-bdf4-fd6df3942ab5", "sighting_of_ref": "indicator--ccb04909-aee0-4e7f-9ae7-c7739c48e536", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b52f85-8c29-4a1f-8f20-1809ed74fb32", "sighting_of_ref": "indicator--952a4dcb-0aee-4324-9ef0-569034f07add", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a97992d-8c52-487c-abf7-9c970d93f4a0", "sighting_of_ref": "indicator--25be0e54-d57e-46fd-92d6-fb345baa365a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3857dad7-a36d-4e6b-803d-6244356c36ad", "sighting_of_ref": "indicator--e6e95a7f-f44f-49fe-9a66-f033c1cd1f00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d654bd-522b-45d4-92c9-47829aa8b32b", "sighting_of_ref": "indicator--bbb6d454-e97b-4c98-ac2d-d093f8216cac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2a03e7-a43a-4ff6-a08d-b08b3b780908", "sighting_of_ref": "indicator--6b7be585-9bbd-4d70-b0d3-7b55434fdc62", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e4c10-782c-454a-a048-6c8e3a991f2f", "sighting_of_ref": "indicator--ef49a60d-3272-472f-abb3-2b9f425eeca1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b286c-1600-484f-a514-31b278f78f8c", "sighting_of_ref": "indicator--e7fb9a8e-d529-4bd9-a023-763f3f45ab8d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b403626f-d415-4d8a-9252-dd1a4d47a7d6", "sighting_of_ref": "indicator--08728a50-118d-4e84-abc0-8f6da08e414a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62b720b-28bb-4583-a92d-219023ac6c6c", "sighting_of_ref": "indicator--2ed2eecb-d18a-4623-98ee-a78e6fa3731b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da73ccb-4efd-432c-902f-46be892547ea", "sighting_of_ref": "indicator--9ce406e6-99fa-4407-9427-57c928aae043", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743fdfcc-cbde-4d18-947c-5dbb2d786cd2", "sighting_of_ref": "indicator--443a18a9-fde1-414b-b5c4-6f4819b818b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17705c2e-7325-4491-860f-51e344218489", "sighting_of_ref": "indicator--d970a6da-98aa-4752-87f6-08ad6e279eae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cef546-f248-49bd-87b5-51bafb72eb23", "sighting_of_ref": "indicator--6d4d323a-384c-4489-ba8c-68246f64238a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9a0b27-7ac9-444e-970e-db5736179ac1", "sighting_of_ref": "indicator--2c54cbbc-7c59-4830-b037-b9611fbb230e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb41018-30cd-4e2b-8566-fce9b0553984", "sighting_of_ref": "indicator--0e465510-6a3a-4428-9aa4-eeae5c35d46e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed6491e-b274-4cad-846c-1bbfff87032d", "sighting_of_ref": "indicator--d4e9d826-2c09-4935-b348-55c92230714d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bb1c04-d2fd-46ab-a1fa-301809df2e64", "sighting_of_ref": "indicator--ac77fa2d-7f3f-4826-9da6-018de1e2b32b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3835199-37a2-4c31-86aa-080068314cc4", "sighting_of_ref": "indicator--38350695-9683-4e93-b780-447022311b81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f734fc36-d1b9-442b-95c6-b953d56d8ed2", "sighting_of_ref": "indicator--aaa0f974-2c11-43c7-a374-d7adb81abcb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a591fb0a-417a-443a-bd55-ea469ba635bc", "sighting_of_ref": "indicator--9c9968c3-1d43-4572-808f-b76c3c2f255b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af6b8fb-15ee-4cdc-9d35-608d463876b3", "sighting_of_ref": "indicator--ac8a772e-f586-4079-93f5-0fb75bfa3718", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bdde59-c5ed-4a37-8040-3f9050e41c86", "sighting_of_ref": "indicator--b53051e3-eadf-495c-ac1e-ae4e89971285", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d09dc16-db42-4d55-9427-ec65b2e4c365", "sighting_of_ref": "indicator--49960309-53db-4fe6-9657-863fad49031f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5acf115-7d64-4b98-9b50-96a9b8a68f73", "sighting_of_ref": "indicator--31efaed7-ff27-4689-9a1a-f5d55f0e92f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a99029b-ea9e-4fff-845a-70b5cd67811d", "sighting_of_ref": "indicator--fffa5a48-19e6-4b10-9a1a-df88c6bc51cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224b52a6-3570-44c8-b44d-03b8a6d1e031", "sighting_of_ref": "indicator--2014dd2c-7698-476d-ade9-4ad19f82b5bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5be9bbd-d091-4f8c-9163-3eba5745db3d", "sighting_of_ref": "indicator--40fe5505-346c-4751-9007-5a4e7e42b091", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3691eb2e-60e6-4481-92f6-22e06e18aa43", "sighting_of_ref": "indicator--30b713d3-2bc5-4e75-84ba-9bbbbd97c9b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f257862f-b55f-4ab3-9b34-ed73beacb3e5", "sighting_of_ref": "indicator--25624d71-c0a0-4e2e-a422-d8f22c80d634", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591401f-fd92-474f-8259-0310db5dc069", "sighting_of_ref": "indicator--6c0dfc7e-4a0a-41ec-855a-60a62b5c3bf4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1135e0-bf53-4b3c-aa63-4c55bdc62464", "sighting_of_ref": "indicator--8180fac1-8b1b-4fab-9122-0e29b3ea94f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e8fc51-baa3-4633-823b-c3d10ac74eec", "sighting_of_ref": "indicator--8c57cde5-fb70-4340-9755-55df62f2709a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136d228d-c647-4831-a704-43b5b1f52bed", "sighting_of_ref": "indicator--d2794500-c2ec-4254-a026-e33c23242d4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c22a2e1-9cfd-444e-b9dd-98230161c6f1", "sighting_of_ref": "indicator--398d3a1b-dbe7-41d6-9e7e-cf4e7a622ac9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b0037c-3e05-4467-9585-e851e354ad1a", "sighting_of_ref": "indicator--e5bc1c03-8d2f-4b25-9971-c9ba0d3222a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b49584-cd52-49e4-9a87-8b3c72a091a8", "sighting_of_ref": "indicator--bc7598c1-9cc6-4c2d-b067-85fb268ecfb2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff14024-4263-4568-96e5-4570eaef5c3a", "sighting_of_ref": "indicator--f8138f19-4d30-414b-af17-bd5ee32d3301", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cea7a9-6a98-437c-9abe-f7a608500499", "sighting_of_ref": "indicator--19f86103-8cf7-4a7a-95c8-928a517c7aaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13c2fd0-340b-41fc-8fa1-a0136b3cc98a", "sighting_of_ref": "indicator--8e29174e-bbcb-4a0d-a6ef-08a2244ba45f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3183a4-2b8d-4336-b305-59f93e3d5961", "sighting_of_ref": "indicator--961ae51b-d612-440a-a441-2305739a89e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920c6f8-e23f-4fd2-af48-c701f684b376", "sighting_of_ref": "indicator--a292ce64-d565-4749-87c9-fb710c9735c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7264745f-ad70-4ddc-99d3-3774e05a1d61", "sighting_of_ref": "indicator--f4c05739-e314-4bb1-ac90-a8577ad38dee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583dde5c-b4bd-4fb8-95cb-1a7e4feae667", "sighting_of_ref": "indicator--894d947a-15b7-4fe2-90a5-5f89d400f99f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90393471-f7b2-414a-966c-24410d8dd4fc", "sighting_of_ref": "indicator--55e6a681-8e0b-4200-892d-21b7952bc7ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c734e949-0e80-40ca-b406-daaefac231cb", "sighting_of_ref": "indicator--ef0a27af-a31b-4bf0-b4ad-c106db8df876", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a21dcf4-66e5-4f17-8059-838a42cf1e69", "sighting_of_ref": "indicator--ff9c2f19-b91c-44ea-9767-5556c4577391", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f18b92-aa45-4cfa-91a7-a0883bd0e0a3", "sighting_of_ref": "indicator--75c8e65a-5ece-4375-b630-25b4e99e49b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d231a8-74b7-4db6-85e9-e9b7cb73b8ef", "sighting_of_ref": "indicator--6e87f528-9ef1-49e4-be81-2720ebf3b777", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a45738-e22c-406d-aa9e-2a1015101b97", "sighting_of_ref": "indicator--7f891f37-89a0-4796-880f-f4255872817e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498e28c6-dc37-428d-80f0-11f7181ce1a2", "sighting_of_ref": "indicator--9bc24444-20c9-4ada-9c08-d3b2fd93c431", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f36617d-bfe3-41de-bfe0-6a2c007542cf", "sighting_of_ref": "indicator--45586c2d-d42f-40ce-9c26-1b86a78cc3aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd0f553-29be-4541-bb2f-fa80f565843b", "sighting_of_ref": "indicator--b49776df-fa94-4f51-921c-3cd5eaadc20a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5f7419-cd49-49ec-bee1-e739258b6f49", "sighting_of_ref": "indicator--4cc9730f-7435-4e70-8dfc-709b457215e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6d69a1-2baf-447e-93c2-5f33d180e11c", "sighting_of_ref": "indicator--4aa46a43-f1d3-42f4-bc9e-ab5838eff353", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1edb0d-d1ab-4af6-b5fe-73cc09f6e2fd", "sighting_of_ref": "indicator--63232eed-3cc9-4f32-84b3-4ed98cb8766c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e8dd13-389c-4150-b460-f999dac4ffc9", "sighting_of_ref": "indicator--b8bc55f6-0ff7-4606-9a38-258cebd8e141", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c86237-d7e7-4c5f-9096-47db8de13c32", "sighting_of_ref": "indicator--397dae78-4bf0-4682-b1ad-9f300d13a971", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5092f45b-e606-4537-82cd-e4d9770ceb46", "sighting_of_ref": "indicator--16806227-3e23-45c8-92d8-3eedc3fc7a2b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b323870-4068-4bb8-95b6-54ce3043845e", "sighting_of_ref": "indicator--9a09a4a3-490d-4688-9d28-7168e676c862", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4c57f8-9286-4dd3-9234-8dbd6e3d859e", "sighting_of_ref": "indicator--28717260-2e5a-4786-b9de-6f68024e670f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ce42c8-c75b-4b21-913e-e5a87f6a9225", "sighting_of_ref": "indicator--4256befe-8b3d-4534-ada9-4c259570c1d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905b8bd1-d4ef-4705-8830-be774f20b02e", "sighting_of_ref": "indicator--9b492403-f366-44c5-ae22-fce306ae3d54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac6879d-facd-4199-b605-0f2831d86100", "sighting_of_ref": "indicator--0e4f43e4-7887-499b-a680-7aad16fe4258", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d026ab0-021c-440f-a77a-49c7c08ca136", "sighting_of_ref": "indicator--76782a39-d94a-405d-92d2-2c223a6992e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276cd0af-740c-4e4f-8c17-0cf6a1c6d00a", "sighting_of_ref": "indicator--c7eb060a-ea94-4830-9830-172d1ecffb1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d263279c-a77d-4fdd-a1c6-4304306d92e0", "sighting_of_ref": "indicator--a1c51dce-5898-4378-8966-7fc26250a7ef", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f5ed19-c71f-4c4e-90ec-fe9b4ed3e742", "sighting_of_ref": "indicator--05d591d1-108f-49eb-944d-a25f177e595c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f4b80b-1ca2-4ae5-94b8-b6570b851782", "sighting_of_ref": "indicator--7cc8b5fb-4590-49e2-8aea-a51c9474107b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8003bb3-fbda-4ab0-ac5c-a09321dbe818", "sighting_of_ref": "indicator--5e4de013-10e1-4216-bd6b-1c9d2c761652", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007742b1-d8fe-4001-81fb-85c37bad2405", "sighting_of_ref": "indicator--6d619369-7780-46f8-9959-a1d5ee20ef88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42426c34-14b9-4943-8348-24a21848f378", "sighting_of_ref": "indicator--db4c92f2-8940-4b5d-b49f-c1204fa6a6e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b118e7-05b0-4bb8-b8dd-2d1134aeccb8", "sighting_of_ref": "indicator--7425914e-da17-463b-adf4-476b19b86b43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36be05d2-6993-489a-958a-b0ed9b41cff6", "sighting_of_ref": "indicator--2e7666ff-532a-44fc-bf96-16f1a2699a75", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e85021b-f842-443b-88d8-c208523c8cef", "sighting_of_ref": "indicator--db5f6cb6-e17c-4a03-8b8e-4f001d4df2e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3062dfaa-ba2d-4180-be1e-78e4319a03f8", "sighting_of_ref": "indicator--9cd88e16-0a60-40b7-90fe-5b846af1f78e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882f6c97-6e3d-4f38-a7f0-a9896cb609cb", "sighting_of_ref": "indicator--49296161-eeae-40b0-a46c-de37f3d03f93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc03a3b3-5f4a-4b6f-b8e3-038838429c19", "sighting_of_ref": "indicator--33bc9ae6-26a1-4335-aa25-bf04b7e2dbc2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc41589f-337e-45d8-a488-e4c2658492e6", "sighting_of_ref": "indicator--0ca2f2cc-ee61-44db-8669-388aea1714a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0d0c38-7bb7-4cbd-bae2-b702d4dcad43", "sighting_of_ref": "indicator--3b95b5fa-1b2a-4803-be62-26901431379f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3a11ad-77fd-4d69-922f-04457a2498e8", "sighting_of_ref": "indicator--986a1989-502f-4b08-9335-f2ea38eb0678", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c0a81-08ef-4849-9efd-2b023fb87e0c", "sighting_of_ref": "indicator--8873ad5e-c794-407b-a5f9-dad9902a7c47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428e9d48-b001-4187-ae95-25016e3a6d2b", "sighting_of_ref": "indicator--e31a290b-34e1-4d49-9741-6a45fc673daa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44887ae0-6b60-4e44-b9c5-c8aa9341c926", "sighting_of_ref": "indicator--41d41063-aa9a-4513-b49b-e48bd966f749", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638a8249-c0f8-4cee-8537-039bc3bdafad", "sighting_of_ref": "indicator--237ed1d3-8e8d-4516-be1a-58703452fc7d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c85ccf7-5083-4101-9797-c885d2335061", "sighting_of_ref": "indicator--d93c7bd7-2e5c-49b0-9117-d35107fd746d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5122475c-80b6-4bf9-b255-3b99efb49228", "sighting_of_ref": "indicator--30d887ec-3aed-45a6-bec3-d83fcf2b4d9d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289d94da-ca81-4f98-b49e-f02723851c0e", "sighting_of_ref": "indicator--54c61103-59fc-43a7-9fdd-daeb22417e4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4826564-deb5-4f74-abbc-9258e8da5890", "sighting_of_ref": "indicator--f50b46f4-98a0-4fb6-9b47-79b72a24a16d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0295dd9f-ed8d-4a81-807e-51eac89013c2", "sighting_of_ref": "indicator--d547c927-898a-4fa1-b853-9ea0c85213ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ff4c26-00dd-48e7-ab8a-5bd5e89a8b27", "sighting_of_ref": "indicator--1e99cc8b-f9c4-4824-8396-31394378ee2b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4700662-fa5e-4761-9750-f2c5a0d9ef0b", "sighting_of_ref": "indicator--67c0b669-54ca-4904-a3de-d9b76bd0059b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f9e3a-761a-450f-b34c-1c83b9d9b6ca", "sighting_of_ref": "indicator--a8c082b5-0392-4cf8-bf34-a0a1f3ce0f78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570001ce-a8d3-4a73-a6eb-c8dc10d0c7e4", "sighting_of_ref": "indicator--249107e2-3263-41bc-b401-f3ea73db6f0b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdf514f-3dd3-4ba0-b56e-460547024324", "sighting_of_ref": "indicator--2ab783c8-7888-4d6b-8b4e-0eccfc4fb235", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26501442-057a-4e39-ad92-d0e1a8547aa1", "sighting_of_ref": "indicator--03da2076-39e8-49ad-91de-0cb4ab5c8856", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2617c39c-425a-4e9b-8ace-321e93defe4a", "sighting_of_ref": "indicator--e1b5089c-ed94-4181-8b6c-6e2e0deb0861", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3fb121-948a-41ff-9250-b06bba2a6304", "sighting_of_ref": "indicator--03895a2f-1996-406a-ae77-4228859862b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d06d9ca-6eb8-479d-a023-ba583073ad4d", "sighting_of_ref": "indicator--78954a94-f2fa-4213-8fbe-e3301a848109", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef70668b-3fef-4923-8aa7-80e1182f29b6", "sighting_of_ref": "indicator--500b31a4-6e72-4c6e-a79a-cf8f75a50654", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34943550-cd2d-44ff-a1ef-9fd3ded66cb7", "sighting_of_ref": "indicator--ea94960c-7d0e-40d0-9f3e-94c469602945", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19796026-22e5-4c10-b7d1-cf634eddaf18", "sighting_of_ref": "indicator--0f183073-a150-47a8-b45b-6b68233ccafa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf0f217-864c-49d7-8dc6-57c162fcaa01", "sighting_of_ref": "indicator--39526ad5-fb0e-49f2-9c74-4032d04f81e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96533d5-d43e-4043-9a2c-3887132fb542", "sighting_of_ref": "indicator--2d61684d-5759-487b-9873-13bb37f67294", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80ce3f0-14e4-4b5e-b4df-e26be7fce800", "sighting_of_ref": "indicator--6fe50f00-a0b9-4e28-bb2a-bcd24bff8321", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e817d725-b48a-4f75-b408-e1c789d33808", "sighting_of_ref": "indicator--38587249-835e-4c41-85b6-66aa3c563dd8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12256d2-e09d-4a6a-a9c7-dea43fd70ec1", "sighting_of_ref": "indicator--82d1c5a1-8945-4b74-89e3-ca8a89d90f57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436b53f-d53e-436a-b9ea-36d06c48d061", "sighting_of_ref": "indicator--33b3673a-01eb-4c1b-9659-79bd7bcfdac9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4533b6c-d77c-489b-b232-58197567a4bc", "sighting_of_ref": "indicator--b9f0203a-7964-4d0d-b6c3-13fc256a3674", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f50afc6-f304-451d-82c2-9950e9344261", "sighting_of_ref": "indicator--508927ef-774f-483a-a1a4-10a33e37b403", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7452b7e5-e9e0-48f9-afb4-359ef9444edb", "sighting_of_ref": "indicator--1fa40c27-9277-4922-8c01-91c33dc17cb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a41caea-2c23-45ac-b609-58d8b1f15286", "sighting_of_ref": "indicator--0ed4ca35-ef04-49fd-853b-a26332ad3555", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bc4fcf-7d2a-41aa-a51e-79367c991289", "sighting_of_ref": "indicator--84bccbe6-bd5c-4023-88a0-653ef7f4baac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20b2a0f-544e-49fb-a517-55f666b4376a", "sighting_of_ref": "indicator--d2a09d59-dabc-434e-a157-ca8e52f98b43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a4e03c-db59-409f-a3f2-5c3f413621c5", "sighting_of_ref": "indicator--00aa5a60-7d61-45a4-8bbf-e51e525a2e6f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf79885-a716-478f-a389-3982e58daf20", "sighting_of_ref": "indicator--d6fda904-8e07-4acf-991a-7e8fa32775a8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06e9791-278b-46a0-8659-84c48178adf5", "sighting_of_ref": "indicator--0825719e-d823-4de4-a410-ddc1e5665c61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6255ffd5-60cd-49d5-a947-4de7f75ff983", "sighting_of_ref": "indicator--832b8a8a-b283-49c5-85d7-e1988c3f8c8b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7217a494-3805-495c-a41d-9ffb1c84f307", "sighting_of_ref": "indicator--e1868a4c-7d4d-4960-ac30-79830e9ae003", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626b4fb6-ee08-49f6-ae7e-8670f708b6a5", "sighting_of_ref": "indicator--7ef41b9b-b167-4182-8081-8b01365983c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f92d312-932e-4b81-946b-049b7bde794f", "sighting_of_ref": "indicator--6447898d-a596-47d4-9efe-549567c99236", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e8c1b5-c67d-4a67-a8c3-e8194414a032", "sighting_of_ref": "indicator--227eaf39-83f8-4b52-95d8-266ea10de50d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599d1ca3-d6d2-4032-b1c3-e43ae3397e03", "sighting_of_ref": "indicator--5a6f2d1d-65f3-4ad1-8d36-efbd9d11427f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec36d7dc-bdeb-49a1-8ddf-7e4cb72ae258", "sighting_of_ref": "indicator--9f09b0fc-4166-4410-b2e8-89a820c82e6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7cd6e9-1a14-49fa-9351-47c038c9101b", "sighting_of_ref": "indicator--4ec27216-be39-43cd-a04b-cb51bfa5e47e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a91ab10-0f1c-46cd-8fc8-61ee1bd21f59", "sighting_of_ref": "indicator--349398da-78c5-4f83-a9fa-66081a709efc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6ebaa1-4680-49d3-9e1c-bd967ec45c7c", "sighting_of_ref": "indicator--7ca8aeac-ac7c-446c-be24-b50df34dbc12", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0cc677-cf6d-481a-a5ce-b32259602d49", "sighting_of_ref": "indicator--6a2defbc-bb98-471b-8f44-012d5b0fb59c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f54e269-bcfa-440b-9303-ee1528fc57f8", "sighting_of_ref": "indicator--ce550d5e-17a8-4303-9258-0562b20625f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8336ad75-0dc0-4125-9563-aca540eb40cf", "sighting_of_ref": "indicator--815338b8-fdc5-4b35-99cb-fa2432cfbfa1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4817e-4696-4931-a29a-596ff4936938", "sighting_of_ref": "indicator--06056108-8ab4-4fff-8b27-5356e79cb0aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50640dde-b2e3-46fc-81b7-307d35fdf67d", "sighting_of_ref": "indicator--6031f4b2-50a6-46cb-a07b-7ed65a8eeea3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590c63b8-4c93-4630-9dd2-5943b80279a0", "sighting_of_ref": "indicator--e3b4f1aa-283c-4ea9-93ef-38fe6c46a996", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad299ed4-e48a-4b7c-a3be-a29138486b28", "sighting_of_ref": "indicator--6a77006e-26b2-4fa3-8c5c-97756af51a65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1db0d66-95e9-4316-968c-471f5e82a56c", "sighting_of_ref": "indicator--80b61f5a-26db-4049-abfe-40954f440261", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9c00a1-ec0f-4dfb-9147-1b7deb5a52b1", "sighting_of_ref": "indicator--dff71c07-5f93-447c-994d-4a95ee3fd87d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d123edae-22e3-40b4-b096-4bee8df36f2b", "sighting_of_ref": "indicator--1de8b037-b82f-42b4-8c76-e42836725efb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ce1174-0d1e-485a-bf65-32d8b5e15468", "sighting_of_ref": "indicator--a718c130-fd03-4a08-bfab-f296a1595ef9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f29cb23-c4d0-483c-a193-d8b54996ee6f", "sighting_of_ref": "indicator--54e6455a-716e-43f9-84b0-f8f766cf3b79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc86991-7e3e-4912-b1c9-3d41c79ad224", "sighting_of_ref": "indicator--88139977-895e-445f-bea0-871c82a87a21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97993290-78d1-496c-94c9-045943ccb98e", "sighting_of_ref": "indicator--96315655-a703-40e5-9ca0-f9337623abed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9d5434-8617-424e-a250-6f129f951ffc", "sighting_of_ref": "indicator--520181e9-645a-4765-be08-1781d1be914f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a1c771-8a10-4cd1-9ddd-c0404bb4a36a", "sighting_of_ref": "indicator--f600375c-97ce-4fb9-8fc3-78b015a1b8c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7019e8d-240e-478a-a107-12c55fd360d2", "sighting_of_ref": "indicator--f5b46862-700d-4bd3-a8fe-572c5d8ecee1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b28429-8e9e-4730-968a-e22a5620309e", "sighting_of_ref": "indicator--a6e69bcc-f2e3-4fb9-9364-08e6d7fc12d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ebace9-720a-4ab9-9879-490d3794f84c", "sighting_of_ref": "indicator--1697d245-e4f7-4b24-a253-6efde028996e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b3a6db-f3fa-43ff-9a53-e56b1613d1e5", "sighting_of_ref": "indicator--337b7bad-e359-496d-8e44-ef63796df82e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75f04f1-85c1-4753-82db-add439051622", "sighting_of_ref": "indicator--735ce1c7-52e7-4375-af5f-e05c97c531b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a649951f-409b-4834-bc73-6b67e447b98c", "sighting_of_ref": "indicator--f5b9efa8-4154-4946-818e-315823a790a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e5e8a9-ffb3-4c97-95db-7145a212c8ac", "sighting_of_ref": "indicator--6ed3859c-a7ef-452a-9592-c92eddc172f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8826be-018d-49f1-a77c-d436eb74c3fb", "sighting_of_ref": "indicator--5f2e5480-ad9c-4204-aa5c-6ae929b9ce41", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa471422-45e8-47ba-a429-0f81dcbed951", "sighting_of_ref": "indicator--feb8533c-0623-4fb8-97f8-13fac87cc3fe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db1dba0-9c0f-4654-863a-1cb1b3681b13", "sighting_of_ref": "indicator--fe6de35f-9b69-4340-93a4-e389033dce9c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3904b1c-2a61-45a5-9b3e-2e7398415d09", "sighting_of_ref": "indicator--42759fca-01b4-40a2-a498-cce30bb9a59b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d02ea4-2c44-4d56-8c3e-ba8ebcf84035", "sighting_of_ref": "indicator--b894e67f-27bd-4094-9aa9-7f7623221f2a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacc944d-436d-42f2-8193-c32971648fbc", "sighting_of_ref": "indicator--0e706216-b1e1-49d8-8b37-7076aacfdd2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cada9dc4-2926-440d-8106-d1489e999e4a", "sighting_of_ref": "indicator--b1e34d45-4f83-49a4-9ffa-01dde3c1c0bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31732048-3cdf-42c9-942d-2608aa5dac63", "sighting_of_ref": "indicator--1785be98-f0ba-4ac7-838e-595584123f3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d6efb-ba8c-4484-87fa-e3f82c9fc6bb", "sighting_of_ref": "indicator--96570381-a282-4617-98e2-8bc11b80f3e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7268c0-f004-47d5-9a8f-56b6aa4ffc00", "sighting_of_ref": "indicator--b24cc307-a286-4e9a-9a4d-fca04ecba185", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe1cb7-9c49-499c-b071-4c28ebeb3967", "sighting_of_ref": "indicator--7858a68a-4b8c-4039-81ac-401628455ecf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669717d2-70bd-4254-b3f3-1a1f54c62202", "sighting_of_ref": "indicator--0edbe432-d87c-49b8-bb33-fe4f6d5aa841", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb900275-868a-4177-9c3a-e41f7dc0b9d4", "sighting_of_ref": "indicator--db42ed17-8bb9-40b8-9e64-7916b3770b73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cf3c72-87a3-48dd-8f0e-8eb311b4e737", "sighting_of_ref": "indicator--d70535bc-2868-4b3c-99c6-c8d861a6288a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c74cca-fb69-4e29-91eb-cedf1755760d", "sighting_of_ref": "indicator--71b75287-f16f-485d-b743-f8fd84a745c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ca3fb7-7765-420d-8c9f-3b4455d8ff11", "sighting_of_ref": "indicator--46238296-956f-4db5-9e1e-7777f291bbc5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d29b6d-2969-4284-9b9e-ac4a51d8eeb0", "sighting_of_ref": "indicator--b61c08f4-a320-47c8-8b8b-68c67daa84b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d659c75-d9eb-4450-a722-4198209ec954", "sighting_of_ref": "indicator--26afec38-adbd-41f2-8196-2d4a378d8a14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c596ad0-2438-484f-8e35-f6741ffbff59", "sighting_of_ref": "indicator--a2933653-575d-45ba-b100-7c794fa10533", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50adac8a-a70d-41d4-b09e-d6e98f69cb53", "sighting_of_ref": "indicator--029d24c1-fe06-4c2a-b8ce-5c3c13ff41cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a546ac2-b4d0-4635-8e37-3d96608fbb7d", "sighting_of_ref": "indicator--00ca365d-4eaf-4c59-a30a-fcb0fbc94e0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3df15a-55ab-4f65-8edd-844ba63c12cc", "sighting_of_ref": "indicator--5abdeaf7-dfa7-41db-af7a-df6046c8eaff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65dd827-3e36-401c-8bc2-4b2f79b4fcc3", "sighting_of_ref": "indicator--6891c0d7-f31b-4fb0-9f79-cf4b0f674676", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce59587-ae07-46f6-b078-3e11bda89225", "sighting_of_ref": "indicator--bbd505f5-bfc6-4b60-9df6-cf91b9ac0efc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d11f69d-9c21-473a-8124-13d49db25e07", "sighting_of_ref": "indicator--ffe0523f-4d4a-48b9-8154-a5f31e87c33a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6426588c-1bbb-498f-9f08-cdf5c70d07d3", "sighting_of_ref": "indicator--87b71765-9c1b-4caa-aaf9-4715b0be98d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3827f4-512e-4bab-9555-fafd9688cf30", "sighting_of_ref": "indicator--2335d91e-1a37-4190-9141-91c91e3f524a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb5053f-2126-481f-b45d-9c4e01bca86b", "sighting_of_ref": "indicator--cfd03910-a21c-4def-8631-d54d1d23b4b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d3c716-e4c6-4564-85dc-b69926fbc848", "sighting_of_ref": "indicator--79f0dbd8-f3b6-44d8-b905-d27b4d5708c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c1b6dd-aac3-458c-959e-4db818212733", "sighting_of_ref": "indicator--6f7dafce-9070-40e4-bb82-f27da1b4f345", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984d43c5-ee4c-40ad-8613-41f2ce7f8726", "sighting_of_ref": "indicator--a96b5539-4065-48ae-ac86-36e8fdff268f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab89061e-878d-4467-9acf-bddb6ea2fcbe", "sighting_of_ref": "indicator--8338276a-2aae-4ff0-98ca-ee2615a01389", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08130623-c4a6-4a49-9fca-f57d75e5ccf6", "sighting_of_ref": "indicator--355cfea6-221a-4c11-ab0e-32b85d97f39d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff73e45b-cf9d-4d25-9572-ec3a4c400d2d", "sighting_of_ref": "indicator--641e66cb-2621-454c-86f4-b8501b229964", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedcc954-b411-4b08-92ac-a177399e440d", "sighting_of_ref": "indicator--f29312c1-9cec-4ba5-8886-ce62f6232ec5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e3283b-62e4-4ef1-a575-258053cb7403", "sighting_of_ref": "indicator--194c4812-b992-4134-8b64-f12557d0556f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c18c26-e613-461c-a1e2-472cdb4af912", "sighting_of_ref": "indicator--6a7af45b-aa53-4f9c-ac47-e98d3ddea9be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcab3d6-8088-410b-aee1-bae22ac225db", "sighting_of_ref": "indicator--54223741-2da2-4eef-b2f2-30fd74b2d2d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1bbf04-8c19-4065-85a9-730e9237f37a", "sighting_of_ref": "indicator--87b9cc83-e055-4114-a247-73982a6c07c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53d3a0d-98e6-4d0b-a3ee-17163c06f71a", "sighting_of_ref": "indicator--446f6d10-d1ba-4886-b2dc-7ae077fc1d1b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9ff774-9eb4-4c17-8635-ef61650ff234", "sighting_of_ref": "indicator--d35a54f0-6fd5-45ec-bb1c-2d49c64e9c74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d149e6df-df83-40d3-a7fc-4a9a55007271", "sighting_of_ref": "indicator--bbd846e4-353c-4ddc-b484-0698ef40fa52", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1905044c-ebc1-45dc-97d8-adf6c6d9b90a", "sighting_of_ref": "indicator--6494d970-62f3-4141-82f2-01b8ec05af7d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af55903-c290-441d-a39e-7bafb5b96d0b", "sighting_of_ref": "indicator--9ee7951d-3ff0-43e1-b099-544d97b66ad3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4d6b22-99f6-4969-96f0-c2e2d34623ab", "sighting_of_ref": "indicator--bc90c144-f22a-413e-b60c-1aa6f517c29e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311d1400-7ca7-4e42-b743-07c6713b31b0", "sighting_of_ref": "indicator--89dbc3e0-eccc-4c26-b05b-8444bbeed06a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0520050-e6c7-425e-b917-e5dcce00b590", "sighting_of_ref": "indicator--f6a87a16-ab0f-483e-94a3-29b7b71487bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e335ec36-5eb9-4541-94be-9cbec1616b7d", "sighting_of_ref": "indicator--c0cda7e0-c1de-4824-a022-4f571076b926", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd138b7-a05b-49b5-94e9-04abe8e04db3", "sighting_of_ref": "indicator--48067613-8424-4bfb-bf3e-2c10624ae6fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840052fd-b84d-40b6-abb6-d222072adf61", "sighting_of_ref": "indicator--44f74a74-c53f-4e15-b4bb-b9019e5b7637", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05316da5-c0a9-4710-b785-0e421b52c75a", "sighting_of_ref": "indicator--dac345c5-2ccd-40e1-afcf-11984e18950d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34398cc-fd66-4984-8b1d-14c6b48f3ccc", "sighting_of_ref": "indicator--835a08f3-1680-4f11-80bd-363dc8db4442", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06de8a90-54fc-47b8-bfb2-27ef26b6428a", "sighting_of_ref": "indicator--66253745-ffe9-42b6-a9e6-4ff4dd2b8c3f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60db9591-2ea0-468e-803f-e32db2938959", "sighting_of_ref": "indicator--22d43310-10af-4ca9-8d65-5dd9e8c5f27f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02984531-5dbd-473f-917f-7490bfc00055", "sighting_of_ref": "indicator--0dfa6f2e-894a-4915-be68-a9f1608d00c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c01e7-e6f1-4951-a99d-d96a49212bec", "sighting_of_ref": "indicator--6a04d421-b62e-4f02-9acf-df80cbf4943a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5ab2a4-7971-4672-9ab5-42770c03d1a0", "sighting_of_ref": "indicator--fd315b0d-b9f9-44de-9798-8b19eabff49b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4bd5d6-0069-42cc-8efa-8dd40ed6c768", "sighting_of_ref": "indicator--3d4793bd-5cc8-46ca-b566-8a50cb2ea254", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a8f820-acbf-4539-961c-b221354e5993", "sighting_of_ref": "indicator--17bcb537-cb01-4425-bf9e-6848792f58b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db0002f-46ba-4068-9d68-c996f267da95", "sighting_of_ref": "indicator--f85a3e1d-d8a4-4458-b0e4-f925ecb5999e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701005dd-b41b-4a97-b72e-aa4588544b62", "sighting_of_ref": "indicator--8491f311-c290-4255-874c-b6cdfc3156b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e87d58-ec03-4182-aa1f-0ae9bbf04a82", "sighting_of_ref": "indicator--666fcbfe-270d-4196-9c3c-2d83b77e345b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316a9566-47d8-49bd-8c27-eba4a63e056d", "sighting_of_ref": "indicator--7991d9bb-fc45-478f-85e8-0558a5a53c4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a937ccfd-c8e5-4703-bfbd-398e437ef1b7", "sighting_of_ref": "indicator--5cc53c12-d41e-4235-b38e-cdcf5a622179", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c21a48-99d7-436e-9345-788e801edb52", "sighting_of_ref": "indicator--e8d7ba10-bd2d-4ede-8d00-a499b4027a4f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68c8e27-dbdf-491b-80b1-e37ac5c35ebd", "sighting_of_ref": "indicator--90b89540-9012-460d-bbec-916222bc9138", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf567b-9024-4108-aeaf-ad3f214ba417", "sighting_of_ref": "indicator--f9130e98-781d-431b-ba3f-9bd87021513e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc62969-3e32-4040-8971-88289a167780", "sighting_of_ref": "indicator--e3f859fa-c6af-4108-ad48-ce239a3d4318", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef2ad9d-3271-4d74-9298-ac2bd9f45535", "sighting_of_ref": "indicator--e9569c68-6b63-4a1c-ae55-14e0d76b96e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c9ed6-f0e2-4ee5-8ebd-83816642fca0", "sighting_of_ref": "indicator--52bfb478-3f40-42bb-adc9-2ac13c7b93e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8518fea3-5b28-4375-bfec-b763886716e2", "sighting_of_ref": "indicator--bc81382a-bfd5-4cf7-a7c5-32d1204e8d54", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596de468-5f8c-45cc-8d29-541b8526b794", "sighting_of_ref": "indicator--a3699c96-30e0-4781-baa1-77ef8395c48e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3a833f-fef9-406a-8417-39809679cf4d", "sighting_of_ref": "indicator--f31cc814-0bec-4e5a-a02c-ba67f14a7a2d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ae2172-2a5b-4117-b639-2cd6549adff5", "sighting_of_ref": "indicator--b4fc6434-5a77-4940-be03-1c17e2e58587", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f2277d-0e43-4e03-965b-25a62c653930", "sighting_of_ref": "indicator--c8a1f8b8-dc57-428a-a46a-994dbf4656f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84eb4908-e391-447f-a023-1769c9cb0127", "sighting_of_ref": "indicator--9022dbab-e3e2-4880-bc74-48497e52fc87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6bc106-c758-42e6-b27c-646b658cf0b8", "sighting_of_ref": "indicator--8553ab51-a095-4da2-a824-9f76b69127ce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c743930c-b6b8-4630-9df4-03d6f29f51f9", "sighting_of_ref": "indicator--06ebfdb8-1a15-4c8f-b59d-3f117ec19b13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910c83bb-0d0e-4906-b09e-09fcd8fff75c", "sighting_of_ref": "indicator--695dd062-83db-43fc-b16b-9df121d977f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f193303-8446-47e0-89dd-75d21cbb8043", "sighting_of_ref": "indicator--6986d734-dc3a-402b-a455-fa333b4611d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feca7cb8-1b73-4cde-bd62-742acdbdd3fa", "sighting_of_ref": "indicator--fb73e46c-b953-434f-8e1e-1aa6e2e1d533", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa779cd-f347-4ab8-b604-a016a80adb8d", "sighting_of_ref": "indicator--302fba32-44b3-4b07-a5b1-d5dadf8b51ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa6457e-98a0-488a-a6a5-b26d44ca09f8", "sighting_of_ref": "indicator--4c373d30-f0ed-48ef-b2cd-00f0050e6961", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a4c515-f207-4d1d-aadd-6981fa105a47", "sighting_of_ref": "indicator--8e9bec33-4140-449e-9002-8c453d0f9af2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70377857-fd85-428b-bb43-e9437e3f90dd", "sighting_of_ref": "indicator--e8bb3c41-ec91-42dc-baab-9e0ed8ab5dfb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dffcfdd-bed0-4905-b8ff-44b8df8855ba", "sighting_of_ref": "indicator--7e630fdf-d530-4549-9746-b8db411f796e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999aced-bc49-444f-9f9c-b32e931175f4", "sighting_of_ref": "indicator--b4dd49e4-2cdb-4195-81ba-cc040d226907", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba6294c-a477-49fa-bc5d-b427e8a201f0", "sighting_of_ref": "indicator--af48db7f-902e-4515-af76-dbad51bc9ef8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044d4c95-28e6-44f3-a2a6-604f9d474f5f", "sighting_of_ref": "indicator--ab10a503-2928-4707-96d6-46b4592728f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc036e25-6024-4353-a8b8-052dc4aef259", "sighting_of_ref": "indicator--84a118c9-eaa8-4b9c-8e19-7224395250a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34feab8c-5d9c-41cd-a3e4-817264faf9aa", "sighting_of_ref": "indicator--cb9548d0-9d79-41f2-bfc8-542e16f8f253", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a34d2f7-4ce4-4cfa-8ef2-4cf048c8efb8", "sighting_of_ref": "indicator--e7e7d62a-a382-4c9b-a7b8-a789d79ef286", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01310f7-dc5e-4309-add0-fd6f60cde90c", "sighting_of_ref": "indicator--5b60ac88-7e2a-4dc8-990b-d65797b795a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717b6fe7-9637-47ad-9903-7da84cb2a8b9", "sighting_of_ref": "indicator--e8c695a2-c416-48e9-b537-38814de814c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3e85fa-e50b-4337-b784-a770067d7ffe", "sighting_of_ref": "indicator--e91e8618-032a-45ea-88aa-3ea8637aeacb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4a6977-a5fe-4297-bcba-03c911eea796", "sighting_of_ref": "indicator--5073e167-d7af-41d7-a506-5475e30353fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b20c75-81c9-462d-bf96-64b365991b05", "sighting_of_ref": "indicator--4b9d43ba-f92f-483f-8b81-f73e1d1c4b09", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568adc62-89e5-44a4-85fc-003f1167c936", "sighting_of_ref": "indicator--6f874fa1-ca95-4bc0-a746-4fb910f223e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7619cb8-b824-4607-998e-61c62fddabb1", "sighting_of_ref": "indicator--c9ceac2d-8fae-43b5-ab74-67ed91fe18f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05229c4a-849a-4daa-8f6b-2d4c5ba1cd76", "sighting_of_ref": "indicator--b0b3acee-6e9f-4122-a0fc-c67bd468ccb0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3577cf5-2331-457d-8997-4cd38d785496", "sighting_of_ref": "indicator--2ec3417b-04bf-4879-ba87-3ca6efef4f47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9af19be-e0fb-4f54-a2ae-68778fbf403d", "sighting_of_ref": "indicator--bd621dde-4b04-4538-8475-1792a5045d5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f17049-4133-452e-aebd-33e83a098e9e", "sighting_of_ref": "indicator--0e4c326c-9053-4f42-8465-999523c9a295", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39ead34-7666-43a3-8d54-cd43856c1528", "sighting_of_ref": "indicator--9f1f0af0-38d2-43e8-a76d-8d0688aea3f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38409ccd-9efe-490a-a10d-07a4adc9b19f", "sighting_of_ref": "indicator--714cda09-badd-4eb2-870a-923c2c926fa8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4013f464-b1b4-462b-8c9c-82c3c361873f", "sighting_of_ref": "indicator--8ac7af76-81fd-492a-a559-f9e411cc7503", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ee3089-e373-4dd8-9d24-eb0d3cb0a8a7", "sighting_of_ref": "indicator--943822f5-6e80-446e-8890-6d06503414f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2fb1d7-42e5-4f56-b700-04ae9a3e3065", "sighting_of_ref": "indicator--a7dc8dea-ff38-4f36-930d-e2c3fec0338b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9b26d7-15fe-4e30-b92f-18c17b35670c", "sighting_of_ref": "indicator--9c8a8ab7-c541-42a2-a59d-e4ec6059bc45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda93cbb-9b28-4999-99ef-2e1fd2b67aaf", "sighting_of_ref": "indicator--eb3d3bbf-2dca-4d38-acbd-a0c155ef5345", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeb526f-5e9b-4a69-bb74-e4e774670e75", "sighting_of_ref": "indicator--c0da9567-279b-429e-a3c8-3bad467d4736", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7726f259-e134-4b15-b3d9-ed787e8598ca", "sighting_of_ref": "indicator--912246d7-d878-4e65-b836-39434595142a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99134df-79e6-45eb-910d-b5e770f3e451", "sighting_of_ref": "indicator--bfd5c049-7984-4c8d-86ba-787d8acb3ee9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab320f9-d36d-4a52-9090-5d7316717dd0", "sighting_of_ref": "indicator--8a4c4c86-ebbc-4c26-8dbb-0d4ae7cd461f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0583a65b-1d82-4d93-ae15-1f25a32c4c96", "sighting_of_ref": "indicator--e7a97602-11cd-4e19-ba59-b390dbc05e73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b07f62f-7b32-4311-82af-48f6712c2f89", "sighting_of_ref": "indicator--a7b7b5d3-c239-41cb-a453-7ed0f1202063", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5716c7-9d5b-4133-ac59-d7fa9ae575c6", "sighting_of_ref": "indicator--9d1abd90-7963-4b25-a30c-245ccf139efb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfbcee7-1fcc-4dec-886f-e7e98f3179d5", "sighting_of_ref": "indicator--4a65990c-cb50-435a-97fd-eefe08cbe788", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c1f7d2-48b5-4a35-9628-0dd539b766d6", "sighting_of_ref": "indicator--c5e8cecb-9e02-44a3-a5ef-04fbb38765c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15b51a7-7155-4394-b1f2-5c3989cdd826", "sighting_of_ref": "indicator--0c3fd7dd-50a2-4f23-a998-3c94b7749fa5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040ad821-4564-4628-a523-4fd7a9824510", "sighting_of_ref": "indicator--55bd97bc-ec22-4c0b-bc77-a750cdf04005", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bffae14-5499-45ab-ac30-c272e3b7f756", "sighting_of_ref": "indicator--3bee5069-66b2-4e63-8c7f-480010f9bc0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb1bed2-07d8-495a-a18a-b9e5329d35fa", "sighting_of_ref": "indicator--2933bb89-84ed-43f4-a245-c11a8e95cc69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48efe2-7f97-433b-a966-ee40789e22b7", "sighting_of_ref": "indicator--0bd6225f-42b7-4bd8-8edc-ff106e0833b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b52057-4712-41d5-856d-787e99b81691", "sighting_of_ref": "indicator--115fa984-732e-478b-ae1b-c023c1b0dd25", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c9f0f5-a96c-451e-a87f-36e089e23b7b", "sighting_of_ref": "indicator--7c493a4b-244d-41bb-a72f-90cef3514cb6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1190797-142a-4fe8-9965-57651bb88c0a", "sighting_of_ref": "indicator--07dc886a-7f0d-49e5-9009-781ac1f04a55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb865b0-7a1e-4094-8b7b-26fda689db57", "sighting_of_ref": "indicator--b1328d8c-9d7d-4099-a5b5-e60d530b639e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50e1001-d378-4c6f-8c13-8d2872b17f46", "sighting_of_ref": "indicator--f289f092-f5e8-41a0-b243-2469034acfed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab883537-acfb-40b2-90a2-eb4a5d710332", "sighting_of_ref": "indicator--dfe5bcf8-1d54-4a7e-9bc3-d7f7e19bd357", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1964aed6-9872-476b-ba1e-17bb8484ecc9", "sighting_of_ref": "indicator--ddc67a9f-de1c-4e4f-b7ae-85509136454e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51e5c12-ec09-4be6-8ebe-a7afd7db697d", "sighting_of_ref": "indicator--f56078c0-1059-49fb-956c-cf53283e0521", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7b1f61-463c-41c3-b95b-384007da9505", "sighting_of_ref": "indicator--dbebb403-5dc1-4e7a-81a1-ac484d894987", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8025b7f9-f5be-4d0a-98bc-c59aec9c62c1", "sighting_of_ref": "indicator--9d4ff465-535d-49b7-b601-c999c5df9caf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594dde66-7358-4fa4-8e76-38a73f11970a", "sighting_of_ref": "indicator--3962d42a-481a-4a9b-8b86-a35b6be87298", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b948558-6534-4ba5-bfa1-3680d89f2a89", "sighting_of_ref": "indicator--772c4bd1-abe0-4de4-b388-228be6d91741", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39a1ed9-607b-4988-a8dd-9018217aaa83", "sighting_of_ref": "indicator--d581ce69-b2ec-418d-9ddb-9ac16a3478d2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f79fae-72d7-4967-a779-6484454685eb", "sighting_of_ref": "indicator--d35cf13a-2ece-470b-ab6c-29e02b88e28c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d645cf20-491d-4817-89e6-4f6744402061", "sighting_of_ref": "indicator--67fee0c4-3eef-464d-aac5-227790a27e49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a961f60-53df-48f2-83d0-d0446e8b1eb4", "sighting_of_ref": "indicator--d81028f6-6e8e-41f1-be16-387d7444fa5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b6ad4b-213d-4d18-b2f0-e9b563e476f8", "sighting_of_ref": "indicator--1051b66d-cfce-49a1-bbf8-f70e2b9a9167", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2b1177-6f06-4dbb-a88a-f03e4c5cadb4", "sighting_of_ref": "indicator--9fcacf40-14d7-4419-a1e0-6bd45d0c50a0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0df013-7346-4ddc-814b-5db1da7886df", "sighting_of_ref": "indicator--ced1301e-ccb1-4cab-973b-1c747165d949", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67f5f0a-0770-4d8f-a1c4-dd4546af57cb", "sighting_of_ref": "indicator--abbb2485-b200-4dc5-8640-31a0b7a29d08", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb606a43-ec2c-4fa0-b9ae-0518f1a84abc", "sighting_of_ref": "indicator--98f8c85f-7105-4eb6-87de-c1f14f2ee044", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0095b333-0da8-4a5e-a9f3-a0ca5105da92", "sighting_of_ref": "indicator--ca85e0a1-f5cd-455d-8147-4253858d9b28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5340f55-63c8-45b7-acf7-89e9dfd9c4d3", "sighting_of_ref": "indicator--39fa69da-b516-486a-a395-1c76343230d8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a058df-5ea1-4123-a0f4-78cb6b80135c", "sighting_of_ref": "indicator--bbdcc8b0-ea3e-4679-9a05-2c34e38f1cea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee4eb8f-1879-4aaa-bd21-5536ed42e09f", "sighting_of_ref": "indicator--5d8143bf-052f-4503-bf98-6afd5727991f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e140cb-4919-4ebe-819e-ebec38665074", "sighting_of_ref": "indicator--12b98bc0-83de-4fa4-be8d-4848d6a47549", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3cc84d-05ca-45a3-9f6a-95907fd87f84", "sighting_of_ref": "indicator--5c5124f6-9b51-409c-866a-d78bd359e6e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39a2e89-f00e-4436-a033-175332bf0b00", "sighting_of_ref": "indicator--5aa48c01-74a7-4fc2-b019-2f82ef829cfc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d2ab92-2018-4663-b949-c6781b2bc286", "sighting_of_ref": "indicator--12dbe873-f73d-4fff-9d51-195999ffc854", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c32f2c-f2b1-47c2-8bdd-133c67c28d58", "sighting_of_ref": "indicator--b26c4e1b-a39e-4d5d-828e-dd0d9c576a8a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417ad434-7993-4a61-8f88-04813583f639", "sighting_of_ref": "indicator--9ec182ee-369f-4f4e-b880-91fd00ad1ef8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7c939e-84e7-43a3-8a92-6edec66fba02", "sighting_of_ref": "indicator--5f2bdbb8-46a1-46ca-925f-123c3f3417c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c253e8-c1b0-4b4a-83ec-1182f9b7eb5c", "sighting_of_ref": "indicator--f070d47b-f931-4fcd-a6c6-d2d2d230b1ce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af60a32d-8d75-482b-8352-2bb729042762", "sighting_of_ref": "indicator--e7a3c0be-7ade-40ba-a43f-e549144737f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293110cf-7057-4905-b8a5-bc14dc22fc81", "sighting_of_ref": "indicator--312eae8a-c223-414f-91a1-15d6ee28f15d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565f9ab3-dd2a-4fca-9f5b-49dd16acf231", "sighting_of_ref": "indicator--2fe67dbd-775f-423d-b040-b14589de0dbf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0a9c53-507d-4387-ba40-1ad331f0e70f", "sighting_of_ref": "indicator--ddc36a9d-507f-4b1d-bea2-2069bffd8ffc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65437fc7-471e-4af2-8c37-7727253454f2", "sighting_of_ref": "indicator--681e94ae-2255-433d-955f-24e213c7e6cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188fd395-4302-470d-ad65-1068fd93fb96", "sighting_of_ref": "indicator--b0c0b973-b50e-4963-b5ff-ca24ee7a351d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e86c27-e29c-4011-b7c4-9f11b7278e61", "sighting_of_ref": "indicator--18fef5c5-ff2b-4fd0-9394-37496b39f2a4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b6675b-e1ae-4e92-a32a-39c55465dcb4", "sighting_of_ref": "indicator--da64f65e-2340-4379-a31f-056a9d25e2cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e047951e-b254-4022-a823-df9c20b4420c", "sighting_of_ref": "indicator--6c10fbc3-7a35-4b50-b9d6-ac1beacedf91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf1e9b-e1ab-4082-be25-c06c97242044", "sighting_of_ref": "indicator--e77a8e64-65bc-40a3-8ba8-de349ccb7cf7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d3ddfe-45a0-4f7e-b3d1-6b0bc8bd1bd7", "sighting_of_ref": "indicator--b7eff9fb-77f4-45fa-afff-30f1d8dae519", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5733e3-8b90-4d51-a532-91224731ac8f", "sighting_of_ref": "indicator--6ff6dc20-40da-4105-8ce2-1c4eb5add0f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91185ae-a788-45ac-b2a6-dc5d96f96739", "sighting_of_ref": "indicator--1c4edb2b-4a6a-4b95-8fab-9ca5d06ad1af", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a397b9-fc61-449a-848e-02c0b2d6b337", "sighting_of_ref": "indicator--76fdb985-7958-4d07-84a3-6fcdb35cf8be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e921c522-dd4c-4c97-87fa-f78cb0c971f9", "sighting_of_ref": "indicator--3de4a0c6-7db0-4192-8e7d-23b83ae4f21f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4621fc-2b05-4da3-9932-f26859d2d37d", "sighting_of_ref": "indicator--cab146d6-802e-48fd-8b73-ef8763affb56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2478e205-6728-4cc2-b93e-d893483304fc", "sighting_of_ref": "indicator--59c30794-ce4a-432b-819c-11c9d4a558c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6503b6-4b17-4d9c-afe7-e6d1d26b40c5", "sighting_of_ref": "indicator--12fab036-75c0-4135-b9bc-62b130f22f91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec77a3a8-5b34-4f94-ae03-e51b1c42a6f9", "sighting_of_ref": "indicator--2c6f76a8-d9a3-4c3c-9650-a02267011955", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107f4d45-c9a8-4820-b26e-ebedca91bd94", "sighting_of_ref": "indicator--fefc8423-9f82-49bb-bd87-780cc6b4b6b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd2300f-db22-4fa2-9df7-15438c26385e", "sighting_of_ref": "indicator--0ab1ab4c-e983-49d8-8010-c94d2f7eb05c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66b945e-5374-4e0d-9f8e-a92cbb67b31f", "sighting_of_ref": "indicator--aa860e95-e57d-487d-9ca2-e2eb7395b751", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbc19f9-4249-4773-86d0-d50dc01e58c3", "sighting_of_ref": "indicator--04ca299a-c5ca-4230-8eca-e6966b0dcca8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef133a7-853a-4ce3-b119-89f2a5a7eee7", "sighting_of_ref": "indicator--51776d1a-91b6-4b5d-9955-19bd72cf3f1b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1177595-aaee-4d01-a6d6-6a368abe9e36", "sighting_of_ref": "indicator--c179f307-260b-4140-ae1f-b1830630e5b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cc1f7f-2876-44ca-8495-ed0116c886d4", "sighting_of_ref": "indicator--c78bcd09-875a-40b8-8fb8-1cfee220c9e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b46f2cd-cf2a-4917-91c7-8f78e7893951", "sighting_of_ref": "indicator--6a1a0dcf-ce96-4148-af18-12d9b0b4fbb3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf1c799-7422-4c68-b702-a65c8852eeaf", "sighting_of_ref": "indicator--982d9276-de3e-405a-971e-fcf97e67bc7d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbbf4ee-0915-461c-b2fe-635f5162d045", "sighting_of_ref": "indicator--4e72d7c6-4386-45a5-981f-69ba852a3451", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a945b3-0aaf-4187-9966-a07b72c48be1", "sighting_of_ref": "indicator--6aad18b8-3bfb-4da5-b67b-f9b5028059ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcdb3f1-240d-46e7-925e-953a2d998abd", "sighting_of_ref": "indicator--f3a60821-a96a-4c37-be47-787ecbddd3a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09734784-0b0c-44b8-9c6b-99a557a8b8f3", "sighting_of_ref": "indicator--c6a16a1b-0878-44ea-9b9e-61ea04a89a79", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228fba30-f1e2-4d1b-b8c5-b9b79419d463", "sighting_of_ref": "indicator--d419d83d-273e-4f2b-a5f0-d7ea14730f01", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21327e8d-38e4-4b25-8777-ebca299e2f31", "sighting_of_ref": "indicator--7a21b9f1-5a3b-43bb-bf7b-8fbb1862b7db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e20883c-480d-4cb5-bc7b-62a4ccec6a08", "sighting_of_ref": "indicator--f4abdd61-5e6a-4147-808e-de0d669aeeb3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721fd218-c6cf-408c-aa0a-c8c3755023d2", "sighting_of_ref": "indicator--9e4c0f2a-e6f8-4af2-a770-6ff15e876633", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b899a92f-7d77-4555-8488-9bb101acc147", "sighting_of_ref": "indicator--33e57c4d-fca8-41fb-8742-900d813a983d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee555d0-709c-4603-88d6-e663b0161eba", "sighting_of_ref": "indicator--4a55b0e6-a81e-4b11-a366-b9b63a02a87b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da5eb4a-7f06-4fee-b0ef-994ce441c505", "sighting_of_ref": "indicator--7f4e69e9-36a9-4c3e-b7b6-b8558b6989b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51f0fdf-ecba-4aa1-815a-14302e0dc4db", "sighting_of_ref": "indicator--c9b6138a-6d7b-4f31-9d64-e7849a607e6b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3a4e32-1a0a-4049-b792-ecc7d4a2932e", "sighting_of_ref": "indicator--005621e4-a362-486b-9fc1-b780e3af33d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1a6b83-f198-4550-b401-42ca09dbf7eb", "sighting_of_ref": "indicator--d231527f-adff-41cf-974c-0e0153c1e539", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6e885f-8166-4640-ae03-b51e7304c9e1", "sighting_of_ref": "indicator--78955f44-33c8-4ae3-b903-a6f5a2be5778", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d56bdb7-692e-4625-974e-d26d24b98b64", "sighting_of_ref": "indicator--d07d0030-8881-4666-b5fb-209f9dd7ed88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620d5894-8a35-4afb-8b18-ccf26bb9b453", "sighting_of_ref": "indicator--33ca4132-9991-44b8-b32a-0b0e78f562aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b6efa7-b748-4fdf-aa1e-d01af42917a6", "sighting_of_ref": "indicator--527e423a-33dc-4884-b5af-f86b4a7e3703", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622755b4-f176-42dd-ba69-48fd5c9faf56", "sighting_of_ref": "indicator--82d1a3b5-3ece-4a0f-8a15-bd76da97f827", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39667cc7-09a3-4aba-9df0-8b7ea84ac630", "sighting_of_ref": "indicator--350e3848-4839-40d6-860a-8f7080010323", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641fd406-f7ff-4217-bd78-d71fac36ddce", "sighting_of_ref": "indicator--e99bf0f7-c14f-4644-9676-f898c5c8b338", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332ec8e1-9671-4123-9ece-061e2ca7b461", "sighting_of_ref": "indicator--0440e4ec-0384-4794-888d-b38211d4f44c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8003beb7-fa8b-4776-9fda-11a424056679", "sighting_of_ref": "indicator--7e6113a6-bdc9-48e9-b415-4276c9ff1885", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31be042d-e307-4425-9cf6-f895f1edfb13", "sighting_of_ref": "indicator--85a6ea08-8ead-4462-8216-1b58d83173c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5692a0-7a5c-4c98-8fa2-dc0221e9e962", "sighting_of_ref": "indicator--9ff4c3b9-2a61-4da0-8016-e363d10f5061", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e70d912-9c40-44b1-add9-24e3f52fb804", "sighting_of_ref": "indicator--26bfd3c6-00b5-42ff-bfb5-0d69fc6b04c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b5a29-4108-4fe1-b6dc-56058c94c274", "sighting_of_ref": "indicator--f9fe3350-650b-407c-a7e8-3d647d2a16ad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c430c3a-2223-4c8d-84f2-cec1e3b40b84", "sighting_of_ref": "indicator--f0cb9760-40b6-4306-8dae-979ef6dbfe57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7babf274-d559-44bc-95f0-43f42903e4c5", "sighting_of_ref": "indicator--979fcfbe-32c2-4ced-bc6f-3c6aef7070b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e900dd9f-6578-4b5f-87a7-2bbf72d0cda5", "sighting_of_ref": "indicator--9077e5e4-4b51-42db-8b9b-5d76f7dc7aaf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1861efd-3e7e-4c9d-91ee-c5fba2fe206f", "sighting_of_ref": "indicator--e93d2a78-2ffc-43af-9983-f9940455a124", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fd8c47-fa21-4c0a-861a-cdfcc0ac72c0", "sighting_of_ref": "indicator--8076c613-3938-45ce-982f-24b3ed40e284", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd64dfb8-0700-46d5-bc45-ddcb35aca021", "sighting_of_ref": "indicator--1a2cf0b0-09db-470b-8ad6-643039141ce5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ec97b-75f7-4272-af03-39731ce756bd", "sighting_of_ref": "indicator--ee09aed3-2d6c-4d62-b674-d80c3893e4ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a07ba-dfcd-4002-98b7-8c2dd7ede8d5", "sighting_of_ref": "indicator--6e429528-36b0-48d8-a1ec-235dd1b19b3c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c98b406-9493-452c-8d2c-c2102aede5e0", "sighting_of_ref": "indicator--4326ff55-e8a4-40eb-bf35-2735011d8aae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8552fe7-7132-4e7f-b71d-70f2efc4e5e6", "sighting_of_ref": "indicator--bfd0146c-628a-45aa-8cba-5f1989a53a6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89a0bd8-bd45-4724-a5b3-2414160993b7", "sighting_of_ref": "indicator--970d3ed5-3711-43af-b211-1879ee6a419d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4929dc-a519-4922-810d-4c5db5e5f707", "sighting_of_ref": "indicator--d13439bd-a2da-489c-8761-40fdf0521e9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9cfc9e-24d7-4583-9f16-3d557a95c6de", "sighting_of_ref": "indicator--2712e681-fd60-43ac-9be8-dfd6e8cd7c32", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d517390b-7db6-4ced-8047-63535eac6fc9", "sighting_of_ref": "indicator--fc3f1a05-4602-4d64-ae23-318500d556c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff17edb9-f044-4faa-897e-1f7d45c4d1f1", "sighting_of_ref": "indicator--df57680f-31b2-4203-805e-f524d7ac2ea3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b174e-d015-4392-b780-3193e7c4ea53", "sighting_of_ref": "indicator--2891a2d5-6ee5-4c16-9635-27fcce9cad96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8346669-e736-44ed-8047-7d1e5fc82e22", "sighting_of_ref": "indicator--e8ee80fe-d2b6-4946-93d7-70c86a4a63fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d84aaa-b3e5-4cbe-a48c-82dd490b6851", "sighting_of_ref": "indicator--4dd79092-9a24-4c03-b842-cb33f5ec5286", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece47747-1fbc-4f56-a0e2-aa22ca0d28a9", "sighting_of_ref": "indicator--5479c145-e4df-41ec-80e5-97f5758c1783", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015c4fdc-ea77-46a8-9867-87919941e383", "sighting_of_ref": "indicator--1cb41bf3-e6c9-48cc-9f51-25afadd9eaf0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cfbdc8-c261-4308-b65c-77636378bcd4", "sighting_of_ref": "indicator--f90c12e0-a67e-4c8d-b111-bed0858b4ffc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9963e6c-95d6-455a-9102-7dbfba5060e3", "sighting_of_ref": "indicator--181c6538-bda4-4e41-bcbb-37bd2f91f19a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9336d2dd-cb33-48f6-969a-ab4313d969b7", "sighting_of_ref": "indicator--857b69b5-4eef-4374-8867-3cd5d8d8b988", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42876cb6-4d37-42ee-8559-a08840b2955a", "sighting_of_ref": "indicator--da38a66d-3d92-4bf4-8d7f-160415b7b289", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec23a9d-9342-4b97-b8f1-726ed344a63b", "sighting_of_ref": "indicator--4ba94e5c-234c-4066-a87d-4bc94ce63675", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb2096d-3eed-470e-a57c-d7048e51c1fd", "sighting_of_ref": "indicator--2512bccc-684c-4337-85d8-c297d38d1192", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116dd509-93a0-4fcc-a24b-61f79d80fbe7", "sighting_of_ref": "indicator--36109f04-1355-4773-a82a-1d9fb6ce8fbf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792db815-f6ec-4e9d-93ae-c0babfd4c0b0", "sighting_of_ref": "indicator--1b98bb21-dfe1-49a4-a60e-b7c6a94f2e0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa6bf46-91ee-4adf-9923-9a6b2cd57c98", "sighting_of_ref": "indicator--a23801f5-aa0b-44df-9783-c8b06377c036", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dd02b8-5a95-4beb-bbfa-66eeec82b62e", "sighting_of_ref": "indicator--7044dd88-bcec-41ca-a855-49581416f47c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861a60b4-fdbe-41c8-b993-df8a0fa1de93", "sighting_of_ref": "indicator--b0aca66e-6434-45ce-aa75-97d5ea8261ff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae771fd-9abd-430e-bf2b-be67249a1ec6", "sighting_of_ref": "indicator--c1bc1242-89c8-4730-95a2-d24f07cf43bb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5280bd-95b6-477f-a875-1039e7093d23", "sighting_of_ref": "indicator--6f68e88c-619f-4c99-a025-bc65a0eb6d65", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ede864d-64c1-4be0-8073-9ff620f5e060", "sighting_of_ref": "indicator--4d93fdb8-7767-4369-a8d0-d371e49a16e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c988f507-6994-46e9-bc83-6969fd7fdff8", "sighting_of_ref": "indicator--6c517ff1-6b5c-4dca-ba7a-d5f87c396fd5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7606bc8-5f4c-45a3-ad35-e9164fbb7304", "sighting_of_ref": "indicator--3cb79d9e-a423-46cc-86c4-f7710944e5fd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78453b4-287e-4c3b-9ff7-ab3ee950d929", "sighting_of_ref": "indicator--59d65a56-8218-40cc-b237-9c891f21d0bc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71d6f9b-c00d-47aa-8d72-a3bb302d0e70", "sighting_of_ref": "indicator--27af559a-8e46-46bb-8945-92c5fa254360", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95ea9e6-aada-40a3-9282-65ec15da459e", "sighting_of_ref": "indicator--e7169299-3b53-467d-a2ab-f067214605eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af4767d-9dfe-48f5-84cd-57d5092be54e", "sighting_of_ref": "indicator--1b43528d-0c38-40ec-be65-18b3471e1a96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c27362-8030-4340-bb81-472b81928e97", "sighting_of_ref": "indicator--e3be0721-ea94-4ca9-855c-cdb7b7b63418", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14494757-bb85-4047-adec-ce7f0b52cb27", "sighting_of_ref": "indicator--7f1fde2c-3669-443d-9873-c1cdcc7deaa6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6945956-c7e1-41d2-bbb3-6968d7fd2ca4", "sighting_of_ref": "indicator--9b0eed7c-2a4e-44da-b903-c3e7fc564641", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f6669f-e463-4ecf-91f3-b7b3bb522cd0", "sighting_of_ref": "indicator--1ac953d1-3928-46f5-b203-105651b20c3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace221c7-adcc-476e-955d-f067908b4d24", "sighting_of_ref": "indicator--01fd86be-038a-4210-b089-bf678a84337f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9493c0ea-ade1-4048-b744-af4f9b92f31b", "sighting_of_ref": "indicator--9a07717d-cb8d-475b-a47f-b68d9d85a765", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104e4519-7a10-49e1-959c-71ce0b309862", "sighting_of_ref": "indicator--bdaa29f5-5b85-4049-8f0b-99a91c06d39d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d171b9d5-76fb-453b-bc22-0037deb44f59", "sighting_of_ref": "indicator--4431cc35-78dd-46c4-8547-975eb70034ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5869689-5140-43a8-8a0d-d5f664b46a48", "sighting_of_ref": "indicator--1798db28-7629-4f64-a814-c44c2a4937c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f36d464-8f82-4318-bc07-b80f8c7e07f7", "sighting_of_ref": "indicator--f08559f8-6443-4fa4-b226-273075b7b172", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010b03c2-0b83-4229-aef4-8480966d4f68", "sighting_of_ref": "indicator--9d32fcd8-78ef-4c0c-b12e-c8586a8357e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb797d-a8e2-4519-a393-7e30b740fb7b", "sighting_of_ref": "indicator--ec6a4948-2f67-4688-8723-714f3221728d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59910708-63d6-4bbb-a3a0-9f9b5e50757b", "sighting_of_ref": "indicator--e972f2b5-e00c-4a50-92f2-a8edae1ad595", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21f3124-fd7a-40ae-b3b2-5aa1af3bff7c", "sighting_of_ref": "indicator--2e73bb00-40b5-44ab-a99b-1e78c3536d6e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254d66ee-1566-4095-a298-aa043f2ae730", "sighting_of_ref": "indicator--adf15a05-c585-4225-9394-5022ba75b843", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed094255-af6d-450e-b5f2-6ba32df437f3", "sighting_of_ref": "indicator--cac59d02-0468-4e7e-a34a-015eaeee7da5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6972916-9093-44d9-955b-1dde76018133", "sighting_of_ref": "indicator--5648c7a9-3bb7-4a5f-882b-80ea8bc1378f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9032921-57aa-40c2-9d7f-b199434d4614", "sighting_of_ref": "indicator--5504a14f-daab-43af-9190-da55a6ad889f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66563e2-d790-48f0-ae64-25b0e7d3e018", "sighting_of_ref": "indicator--300097c6-5996-4813-988f-8ad638680618", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c1be16-1868-4862-987e-fa9a59febc7c", "sighting_of_ref": "indicator--ca11ad29-db10-4c29-8337-8056775ab925", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84333386-566d-4a9f-98a0-87a1b3052c0a", "sighting_of_ref": "indicator--a5254ea8-e24c-4acd-98c0-93a01cfa0ecd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0793e566-9075-43dc-bbe1-839355bb9048", "sighting_of_ref": "indicator--33ad5c09-630d-4967-ac40-6d2f0a4d21ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d111ea2-2127-4913-b919-725ee1439eff", "sighting_of_ref": "indicator--daf69cae-15a8-4f54-bf9c-2e7ce7786ca6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45253ae2-f02e-4900-8806-0df2ece090cd", "sighting_of_ref": "indicator--69afd2df-ac9a-4fdb-b10f-0c1f77a805f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97e849a-76c5-4419-a667-3f09cf22d5b0", "sighting_of_ref": "indicator--b2656686-e33b-4c7c-b25c-f49e7aa254cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca685cf-ed8a-444d-944e-c2fd5bfa4781", "sighting_of_ref": "indicator--e248310f-f674-4a24-bb03-4fc87528f908", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a2d4a5-06e5-417e-b8c2-3097472349d5", "sighting_of_ref": "indicator--496bc7f0-14d8-48a2-8fe7-1873c86ce55e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d2ee22-aa05-47dc-80e6-7525d061073c", "sighting_of_ref": "indicator--3e5d71ef-1d79-45bf-ad15-59305f2e8eb8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72fda72-bfaa-4b42-8b87-df6fdf6fadc9", "sighting_of_ref": "indicator--94a98869-31a0-496a-b45e-7d747ffb200a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328de371-453c-4fa8-a4bf-5ac444c650fd", "sighting_of_ref": "indicator--e1edd466-e1f8-43d4-b123-5cdf9d44bc3e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879aa54d-8e90-4c4b-acb9-a5761b3e310e", "sighting_of_ref": "indicator--fc5d944b-b825-4d3d-9a98-d869b5b9cfe1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637c3614-8d69-43f0-bbd4-6ea60b5a6ffb", "sighting_of_ref": "indicator--5fd3f16a-224f-4059-b8ee-66ae8f9feb25", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221f6a57-3042-45ee-bf31-b3b357d6b267", "sighting_of_ref": "indicator--aef37f71-10fe-4499-a13f-1aac6f9435cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6846a4-b241-4070-af59-e07f34cc6414", "sighting_of_ref": "indicator--921081e6-f3eb-4645-9099-c3838b3293c0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1ae324-82b6-4e6d-87ec-b53bf954e28d", "sighting_of_ref": "indicator--450225a7-5b15-48a9-bd4c-9d4c491177da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48103488-9b08-4c1e-89dd-2c34f5c670a3", "sighting_of_ref": "indicator--fbf4d985-5040-42c3-bfde-ac56a3832245", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b913012c-59f4-40c3-9b29-1b60859957eb", "sighting_of_ref": "indicator--08bd10a3-cd38-403c-bd21-b4f63ba0aa5f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3964c8d3-3b5d-416e-88f2-0bfb82e89648", "sighting_of_ref": "indicator--ff3506e6-e27a-4d34-b8f9-1174058494f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42511fe6-c618-4659-9f23-549d2654c013", "sighting_of_ref": "indicator--744c6cff-4430-4416-b9e4-a36c9a9acc95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e80c39-69c0-4c6c-9d06-5da9ca97089d", "sighting_of_ref": "indicator--1fe8e4d9-90e4-40fb-8b0c-6d71a774ce55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa41ab75-b887-4f3d-8cf3-04adca728ec7", "sighting_of_ref": "indicator--fce13511-338a-4b0e-96b6-3e3835a0db55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d39a8e-20d7-439e-9e83-6074664bb3be", "sighting_of_ref": "indicator--87741c53-9e91-4bcf-8ff0-90f7e98e5e4b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09efd91-127e-412a-837a-6c18f4419b4a", "sighting_of_ref": "indicator--50bd077e-5e63-4d67-8d69-4dff4a20c127", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7386c4-db77-4a6d-a926-c59cd490f3f8", "sighting_of_ref": "indicator--a482d033-8211-4220-8b90-4066cb1ba20c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b0f34c-bf13-4b1b-9bfd-8f3ac0987a97", "sighting_of_ref": "indicator--2992ad9f-1288-49a4-b087-78330c25269e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc160380-15fa-4f1d-9f65-54c1b0b6ff5a", "sighting_of_ref": "indicator--40870b0f-c635-432f-8747-aa742de2252d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe352b0-08b7-4f2a-9156-f466483e6222", "sighting_of_ref": "indicator--447a7613-f5c2-4b65-b153-9313da449bfd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cf0b77-3f70-4be3-b6a8-bb9bad70dda8", "sighting_of_ref": "indicator--8ec9e69c-1066-4925-b54b-56ae2c51c165", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7271534-0d7c-4c48-bbbf-5d8f56819094", "sighting_of_ref": "indicator--7a8c05c9-58f8-453d-ade5-23772df23af7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb005b9-2bd3-4b6d-9f1a-27ad4df52ad8", "sighting_of_ref": "indicator--b350a66d-c68e-49ad-8835-c03f17d9258b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9756ae7c-1a76-478f-9e80-0288dc1c1679", "sighting_of_ref": "indicator--1ab17cf4-3752-4842-a19e-ddfa912e8f91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0cc282-5487-4c73-9ac8-06dd9faad809", "sighting_of_ref": "indicator--a447f12a-33ed-4c27-a05f-1ce6bba61f17", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1aa29f-d766-4e7b-a615-678a46f5139a", "sighting_of_ref": "indicator--eb1ddff5-1dc7-4af3-928a-1be5312514c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bd789a-09f6-4326-b125-2806a9c4f71d", "sighting_of_ref": "indicator--452f8aa4-e455-4e58-b84c-18da9fd319c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30f7db8-9715-4930-904f-a373b86fe22d", "sighting_of_ref": "indicator--34ec926f-1802-4b8f-8d7e-4ca1452d3821", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11eaeb9-6f44-4fb5-b255-414ddb047966", "sighting_of_ref": "indicator--a124b0d2-d85c-414b-b984-4853485c0be5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12b9e9e-e277-4166-83f1-c80ee8f0e706", "sighting_of_ref": "indicator--376a773d-f446-4ed1-8c68-ddffea68d424", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55192d90-b54e-4c52-b975-dc5bc6c5acc5", "sighting_of_ref": "indicator--f8def8fe-adf6-43b9-891e-b677a9298f06", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2d57e-d1de-49ba-a537-0b4c9179f2bc", "sighting_of_ref": "indicator--d70c3504-7677-4f2d-9348-3efaaa73a4cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f3f774-884a-4e89-9f59-77c7dd9c2df5", "sighting_of_ref": "indicator--2c7032d7-fbec-476e-8a92-8dd99a6f373a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5713f99d-56f9-49ab-87ef-66259f4a52ae", "sighting_of_ref": "indicator--3aa4b131-72ec-4b08-bab4-b937c3e2feb0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98702062-10ce-48ed-9c5c-9f9ae09a231c", "sighting_of_ref": "indicator--5f3acf8d-4080-4500-a58f-f91f2c9c41c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd55064-b3ec-438f-bbb7-694c18141e9b", "sighting_of_ref": "indicator--debadb7e-15e4-4d0c-8387-d6f3bd830253", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c315bc-09a7-4d30-9502-12c06754067f", "sighting_of_ref": "indicator--1151b66d-64c2-439f-8311-674dd31684f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680deb01-aa02-48f9-b9e9-a2b35a370dd6", "sighting_of_ref": "indicator--8c20d865-44c2-442a-b07a-a2713ab5a93b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5e2340-1553-42ac-9873-3af3681f28ff", "sighting_of_ref": "indicator--bc0834e3-c509-417d-b5c0-eb7600c18b7c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884f4a51-1a88-4919-a4ab-7af813875b8e", "sighting_of_ref": "indicator--f485b58a-81af-4fa8-ac6f-49f00492fd8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e500dd3c-13d3-4f14-8fd9-7c4c92f909fe", "sighting_of_ref": "indicator--2ddf9c51-7e8c-4319-9a2e-bc239cc1d4e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c27079e-4442-4738-8dbd-bf0cffa068af", "sighting_of_ref": "indicator--b5099d81-f8d9-4898-91a7-f793ac790dcb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1461be48-654e-40da-a34f-1b61cc75c4db", "sighting_of_ref": "indicator--1d79c85f-debd-4445-94fb-a50e71b0904b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273fd065-db04-4aa6-b0bd-a38bd68b5873", "sighting_of_ref": "indicator--6da9c73f-afe5-4595-9097-1941fae3dad5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93690458-cbdc-4d21-9aba-1cd205a0445a", "sighting_of_ref": "indicator--fd8f0368-e98e-4256-8588-ec78d04ac913", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bba36da-7ff8-4978-a904-75ab221bbee6", "sighting_of_ref": "indicator--910830bd-6c22-425c-a8f5-b3feda43c6d7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18414a54-0617-43a8-bee1-3dab9ffc3a0c", "sighting_of_ref": "indicator--44ffd45e-4c49-4f8a-b4e4-b9eb9befc447", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e05afe-10de-41e0-8cde-617007e71371", "sighting_of_ref": "indicator--7391a5dd-4ef5-4d56-b052-8e15d878eb59", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e2612c-2a15-4a9a-a1f2-30a01c9b6fbe", "sighting_of_ref": "indicator--f441385c-9250-492b-a1ac-3da999339387", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fda7bfa-4d4d-4964-b34d-ff4de5fcd836", "sighting_of_ref": "indicator--7730308a-b851-45cb-a692-35dcd64cc452", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9aa8e5-37d2-4d21-8dea-3cf06ebd6212", "sighting_of_ref": "indicator--12d41247-7f8d-4aac-aa58-8fa31ab12255", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52d9191-86d0-45bc-8c90-1632e61e7a4a", "sighting_of_ref": "indicator--25967986-c06e-4dc8-a5ed-0409a162fd72", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe8d7e7-e722-4b47-a8d5-ebd280921a30", "sighting_of_ref": "indicator--cdc11a35-b507-43ef-b44f-053c3dc38661", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34868643-1105-4b56-99cc-8bea41aa8b75", "sighting_of_ref": "indicator--4269a439-adbe-46f1-b348-8140ffbfbe0d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597343ae-1a59-4e04-a1a2-7d89ee608d32", "sighting_of_ref": "indicator--860fd03f-aa83-490f-ad75-38256113fbc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfbf16f-f771-4ae0-8705-7b070018cbe8", "sighting_of_ref": "indicator--29525041-a2f0-4ba7-9785-b3b4bee9b58a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67ceb90-07d2-4afa-a1cb-96190ae6a791", "sighting_of_ref": "indicator--41bf52ff-5ea4-440f-ac2d-1d5b5a8ee5aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab6f77-e391-4193-8ed5-0ed160377bfe", "sighting_of_ref": "indicator--24104ef1-7ddb-4044-9962-ea2bd712ef45", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039a79c-21a1-4290-b966-c76716eb46fa", "sighting_of_ref": "indicator--152b239e-30ef-4b04-ad18-9bc987db4846", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f89a8d8-e51f-4320-be4a-1f9e29c2966d", "sighting_of_ref": "indicator--91847284-b729-48ed-86c3-a5a7d90ee0e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed605ca-355a-4509-bb61-cd4685e47e4d", "sighting_of_ref": "indicator--fb432485-77d8-47a9-b43c-8de7bd181593", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06bbc82-de0d-46b0-a437-e48c2156fb5f", "sighting_of_ref": "indicator--326113ec-9534-4101-bff2-abfb4568e569", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65eaaab-7b5c-4d81-ab86-d0083261ee9a", "sighting_of_ref": "indicator--49452b5d-8cdd-4489-a4e4-1c3a1dc7c1cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795e9ab1-13b0-4430-bee8-a299a73ecd90", "sighting_of_ref": "indicator--35b5633f-dca6-4f59-a925-50121448af4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7a2586-2283-465a-aea3-188134f30e5c", "sighting_of_ref": "indicator--2c23a7ba-070e-4da7-946f-dc14f7cb0b7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19023a8c-ca04-457e-95f7-68da5c4eff59", "sighting_of_ref": "indicator--a57c618c-77da-4949-a449-9067572e108f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d489bd2-95fd-4cf1-8a64-b66c18ff1bbb", "sighting_of_ref": "indicator--f59efe31-fb10-4b70-8187-3734fded64a2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eaac84-821c-4a8c-80f6-5688f5d01232", "sighting_of_ref": "indicator--8c2a94ac-0bfe-48c8-a82a-0e3e1794fa52", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbbc911-b4f4-4eb1-8ef8-0198d480c9e0", "sighting_of_ref": "indicator--91f7b6ac-685b-4815-b45f-66d0c91bfaf3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782dd8a5-d5ee-4d09-a471-d4e7a118fce6", "sighting_of_ref": "indicator--be37c895-116f-4a80-92d3-0ca0b43ae557", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911bcb7e-d455-4610-8277-bd5d688063f9", "sighting_of_ref": "indicator--e76bcef4-c903-4f53-ba8f-df0957b3a219", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15398fb-78ea-4090-8f9d-add624b320f9", "sighting_of_ref": "indicator--1bf21389-a805-4bc9-9de5-aebdc8461d91", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6438251-f833-4215-8791-854d383d5982", "sighting_of_ref": "indicator--fb448864-362c-4eb2-80a8-a206c1ceeaf0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99ab104-dc2f-454a-b0b5-d238efa7a8cd", "sighting_of_ref": "indicator--98be96aa-0553-40fb-bf45-4a4217c866f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95156f7a-e98e-4b38-8367-e0963c1aa50c", "sighting_of_ref": "indicator--ab726e5a-eee7-4441-ba96-47323ab8d9dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094a87c3-71f0-42c5-8ba7-a1ce2f120f3b", "sighting_of_ref": "indicator--6af4b811-e2c4-4803-8b2a-986649890182", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8e1451-7da0-4a50-8348-4c15f5c4d48e", "sighting_of_ref": "indicator--4d0df779-aa98-4a30-9e84-05f2830f6902", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce49e40-9089-40d4-a014-07ce84a9709b", "sighting_of_ref": "indicator--d429ac60-094d-4bc1-b7b1-bd6af9760f49", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057a6534-b956-4b72-ac02-4e91376bab53", "sighting_of_ref": "indicator--f4d4184c-9152-4b5d-a46c-b082a9316ed2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a72c04b-0cec-43df-94c4-22ccb808d2db", "sighting_of_ref": "indicator--bd94448d-a7a2-47a7-9a71-4e683bd74f14", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de458f5a-d099-46fc-9e2a-540b8b1519e3", "sighting_of_ref": "indicator--5698b99b-7155-4e96-a777-0afe5d8a2f68", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5522bab3-7ea1-4a45-a418-3fb08bf034b8", "sighting_of_ref": "indicator--69c6584d-6dc8-4cde-8f68-7f3c3c1c3de5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fd7bd9-d8c2-497e-95ec-db46bcde1eba", "sighting_of_ref": "indicator--bf4c57ff-2efb-46bd-aeda-8932c77ff8dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903a6760-60b4-4b64-b56f-9b0c4d3b5f94", "sighting_of_ref": "indicator--a318e6dd-58c3-4e87-9dd1-61636fd2d447", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c9e86a-9d8e-4454-bba6-50065e8b7ba3", "sighting_of_ref": "indicator--9b194183-70b9-4a63-88e2-a1ba150cc1e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760965a4-08da-4150-afac-7a342f071ab5", "sighting_of_ref": "indicator--7ac388d1-92f7-449b-8748-0964409ddd24", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2313f33-4c76-4eb6-8075-e5be996058ad", "sighting_of_ref": "indicator--4e8b54ad-76a6-4665-8164-216fc7040cd7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5419df5a-b68b-49c8-8edb-c8a0eabad910", "sighting_of_ref": "indicator--86b31028-7a02-4f7f-9d8b-5fd125d45512", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2a3d9d-61cc-420b-baf2-f4c0c65eddaa", "sighting_of_ref": "indicator--fa8d7b17-f740-4ce0-9055-f2beb84bd49b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6145771-f09f-4a6d-89d9-eb7f6b120dbc", "sighting_of_ref": "indicator--516928ca-3b57-4424-bf92-a898ced04f1b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7112750d-87fe-4f22-85a0-86b0b78e036b", "sighting_of_ref": "indicator--78da7d55-8472-41b8-8da5-ef37ecebd36e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce7be81-ef37-4eb2-9c35-884dd9c1cdd1", "sighting_of_ref": "indicator--834f905f-3001-4a8f-9f61-21f4a3dc54bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888e50b6-5aa3-476a-9da7-0d960e758625", "sighting_of_ref": "indicator--bb6e634a-c44f-431d-afdf-422101a91d18", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b54fa5-06dd-4067-a460-fe21007b6b7d", "sighting_of_ref": "indicator--3bfacecf-da0e-4308-b19b-a8fbfca26f2a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8780e673-a199-49ca-82ce-f8ec4271305c", "sighting_of_ref": "indicator--6a746c83-f667-4f7b-9ef8-6ffa2959a86a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b40793-f4f3-49f5-883a-3bb1846f64fe", "sighting_of_ref": "indicator--73171170-e42b-4c87-822d-a28d72ac2406", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44301a95-444c-4610-b162-2f97d9087394", "sighting_of_ref": "indicator--5722f93c-fdb0-4981-b881-f6159b932cdb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4472754-c479-4946-bd0b-12184337b8c9", "sighting_of_ref": "indicator--cf534b19-8225-48f4-b65c-ade23af1a3cd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ca8ef3-5862-47bc-8e39-52649acc7ae2", "sighting_of_ref": "indicator--ce20ca28-7370-4f80-bc67-f2d03da9a2b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30bd9a3-e6b2-4177-bf7c-fb897211fd5b", "sighting_of_ref": "indicator--0fd8d813-a996-4dbf-9d12-2ced09513cda", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0387db0b-ac38-43e9-bf72-84040ff2d86e", "sighting_of_ref": "indicator--227ecaed-b2c6-4929-b1c1-ac5e623cb05c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1e722f-407f-4c4e-a725-67a5656f4a6a", "sighting_of_ref": "indicator--dda2675f-6821-461b-9fb1-917959a19206", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2b78bb-f5b0-43fd-b96f-146dff71b527", "sighting_of_ref": "indicator--97a35702-4622-44f5-b3f1-185b9785b12e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1725d615-c9e5-4c09-94b1-327ac01464c3", "sighting_of_ref": "indicator--0dddd9bb-16c0-47b5-b013-25cab6487b5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3455c7-a0d5-4465-ad6d-5480f7e8649b", "sighting_of_ref": "indicator--98ad2cb2-11a4-453f-9eb8-455d60e0f96a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b87d82-6c87-41d9-b99b-c4576959ab50", "sighting_of_ref": "indicator--a4b252f4-21bf-497f-8ad1-ce15f184df87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995db0ff-96c5-4907-8c5c-54fd29d82399", "sighting_of_ref": "indicator--17e82f49-7daf-4ed0-9e6a-06c9b816b115", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82c66f7-8790-444d-bd5b-a2d7dbe5a63f", "sighting_of_ref": "indicator--b8a55b0a-f33d-466e-a37f-7df061111780", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d266f7d-2c33-4c65-a091-3d28e822021a", "sighting_of_ref": "indicator--4f64188c-ab2b-46d6-8972-ea8b046e721a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9142ed2-fcf0-48a1-a3cb-7c3509871b76", "sighting_of_ref": "indicator--8a6cd713-3f41-4cfb-85a6-a7e337fb49ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61ba47a-1146-473f-96d1-02dd487e4688", "sighting_of_ref": "indicator--39fd014a-4a4b-41a6-9a40-d0cb55c2ab89", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5203944e-a5a5-4588-ae7a-8078714d2499", "sighting_of_ref": "indicator--4fa088cf-cd9c-47f3-8a67-152478ff81aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1b2eed-4f8f-4f62-9c0f-5fe5fd020165", "sighting_of_ref": "indicator--c2c45738-5198-4347-bd31-4b10da3df270", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57648df-1ffb-4f26-bdcb-a7ac69ff13a8", "sighting_of_ref": "indicator--483b5d4b-007d-4c0f-8c09-0dd590bccdb5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94c5162-fa2c-4fae-8189-40592c95eb2a", "sighting_of_ref": "indicator--3e9e5c3a-5e25-4c5a-ab0b-224adb1743f0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9269c7f-ceb3-4870-80d7-31fa5887ad5d", "sighting_of_ref": "indicator--81d91f83-a856-40e7-9bbe-76ebfe54df83", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4b4803-bcb9-475c-9b33-c12ca35dc2e1", "sighting_of_ref": "indicator--fc278aca-c518-4933-98e3-45292da485ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148806b7-f658-4188-aaff-8da29d2802e9", "sighting_of_ref": "indicator--ab82f41e-ced1-491d-ad4a-21c71a539ae2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc476513-848c-4a90-b9f5-6a73a97677b5", "sighting_of_ref": "indicator--e9a175a9-2da7-4022-9735-60c87764b121", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b04c74-61f6-4f78-a255-ae9dc601b6b7", "sighting_of_ref": "indicator--4e18e3a1-a9d5-43de-a633-008169c0465d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ead0011-d9fb-4190-b5bc-a98abed235f6", "sighting_of_ref": "indicator--b3501c7d-25f9-45f2-a306-493e398e6876", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512c4df7-0b38-4142-a8af-add9badb1f3d", "sighting_of_ref": "indicator--146923ea-7530-44a5-81ad-09e92f676406", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794551e4-279a-4715-a6e0-02813781a967", "sighting_of_ref": "indicator--eac5c32d-4480-4ede-88d3-a3f4f4370a5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8efa266-c19f-414e-a434-3d9b4706d8b6", "sighting_of_ref": "indicator--aeaa46db-8157-482a-8aba-8824b619c6f6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add619dd-36c8-48da-b4fd-55fb74360a3c", "sighting_of_ref": "indicator--4ece81d0-6339-4c9e-8792-80fe09752f08", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004e22e9-b2d1-415c-8650-7ab8e3d5826e", "sighting_of_ref": "indicator--922f5023-5a64-4728-b5e6-1a3c20303e60", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039492e8-af6b-48b9-9088-49ce67574b29", "sighting_of_ref": "indicator--e2fe5e86-3c36-4f56-81d5-e0f41df90742", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ca3abd-6bcc-4aa6-875d-7b94a14a684d", "sighting_of_ref": "indicator--4e03243a-b4fb-4886-bce2-dfd5ccd678cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0febc1c1-908c-4589-9d22-87509e765921", "sighting_of_ref": "indicator--8accf95c-6687-406b-83ea-9329680190e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4316fd-17d7-4ad4-88af-66fee4c9570b", "sighting_of_ref": "indicator--3c68c87a-5f90-4ea2-a949-9efc74ce0d50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fb1e65-6dbe-40ea-90ea-322c79f03a2b", "sighting_of_ref": "indicator--ca0afccd-5397-40e7-9461-55c900a6966d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eeed13-89e0-4277-a1a7-a287f737266f", "sighting_of_ref": "indicator--fc9f82ca-8e95-47b9-9d7f-114669839818", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8f92ca-5d2d-4d60-834f-b20b8a94993b", "sighting_of_ref": "indicator--df6ae8d8-96a8-4258-93e1-81e0652a0414", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4512fe6c-90e1-491f-a86c-1af677f2072a", "sighting_of_ref": "indicator--9ad020d3-04d3-45f9-a00c-c42fba025144", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae4c0e7-a463-4983-8420-9099663cdb4d", "sighting_of_ref": "indicator--c90fd0f0-a3c9-484a-8ae0-9b3d52f3a596", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f812e45-cfab-4684-880f-ddb47b8f8330", "sighting_of_ref": "indicator--a82c88b3-2e28-48ea-955d-a051b93d8264", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec8d162-4355-43a6-85de-5224e5602685", "sighting_of_ref": "indicator--4b7d13a1-adab-42cf-9cdd-ba704e918de9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a112c417-19e6-474e-9ea9-1cd2b3664389", "sighting_of_ref": "indicator--38052f33-51f7-4b42-81b4-0f9c37b00515", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77928d09-331d-4e3e-8ac9-94e4e3fb7113", "sighting_of_ref": "indicator--40093500-5ec6-4f85-809e-f2179e81b0f8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72d5a3d-37de-4852-89d6-f13db277b104", "sighting_of_ref": "indicator--d1c43046-33dd-4478-93d2-72b525dc6d21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3ed906-e01a-4a85-9400-8ac2e24a4a1b", "sighting_of_ref": "indicator--5dad0915-8be4-4cf0-a470-af872dbcee16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4df2e7c-ac1b-470b-bbcf-aebb4d367f58", "sighting_of_ref": "indicator--5c5d12ce-ff48-4ec4-aca3-f6f0e41a0f75", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f230e9-fa82-49b1-926f-b1334c54beef", "sighting_of_ref": "indicator--13c2a75d-f51d-49f3-b307-c798689f401d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18a05ee-96db-4820-b13b-827ba1819d3b", "sighting_of_ref": "indicator--3c397587-967d-49ca-b0be-2fb01e3dad86", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5b8a5c-a986-4e57-972e-96c462e678ff", "sighting_of_ref": "indicator--dda2f93d-efc9-4001-84c4-96d055a243a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43acb4ad-d707-45ea-9fb2-fd754b3295ef", "sighting_of_ref": "indicator--3edc4a8f-956e-4b25-93b7-ea741de4bf92", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b82d767-d11e-4206-acaa-23268979a61f", "sighting_of_ref": "indicator--6c456e5d-e400-41d6-9ecf-669555560e0b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755de4e1-904c-41f0-ac06-a42451987b6a", "sighting_of_ref": "indicator--238d7311-7c97-4175-a8a1-64f6e619e1d5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ecb105-66b3-449f-9400-a600ba71506c", "sighting_of_ref": "indicator--05c9c2c3-26a8-4b1e-a86d-a4ef26007b8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abab61dd-6302-4831-b8fa-7ba044e9910c", "sighting_of_ref": "indicator--ebedbac7-b23a-47c6-87e7-e8c18fd1e721", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa7acd9-4098-41e6-b142-fb1a23d28363", "sighting_of_ref": "indicator--fda122ba-521f-4f96-9737-8a5cde4bee5b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee5c9a9-bfe3-4231-8062-9f416a205eb3", "sighting_of_ref": "indicator--eebac612-5744-463e-a88b-cd46d27a9e8a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9760946-56fa-4122-a388-a08be2b4ea81", "sighting_of_ref": "indicator--0a4f094c-da6d-43bd-900f-fbb9f1a620b6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a0c500-64b3-4142-8989-6333200d64c1", "sighting_of_ref": "indicator--19309cba-e6b2-4c16-a479-51a3ad94fa4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8db485-d890-49ef-a3a2-789cdd55f889", "sighting_of_ref": "indicator--050f16fa-935e-4670-935c-ff14232e73dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84a9c68-b9d8-4655-b029-0e43e941d1a3", "sighting_of_ref": "indicator--8bf05fcc-7511-494f-b703-e48ed913d78d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28837fe-327b-4c3d-8f3f-9c51be0a54c5", "sighting_of_ref": "indicator--5ced0d4e-5014-4143-8789-a013d6e601a6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c194c5b3-cd34-4d79-afc3-abbcff5289be", "sighting_of_ref": "indicator--66cc816f-72e9-4319-9454-a1ba22ff74a9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb78a5e-fe54-469f-afe1-b78879f158c6", "sighting_of_ref": "indicator--d19141b5-f3ee-4452-b516-aa769fe09c2f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e16d03e-520f-48ce-8420-4591532b4f76", "sighting_of_ref": "indicator--2f7a552e-b391-4354-853c-41961b15229e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d413f8-739d-479b-ba05-12b5de350312", "sighting_of_ref": "indicator--f354fcde-bc57-4c32-8e0d-d10357b63b66", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da2ce25-2831-42aa-a301-f47cf45f0a2d", "sighting_of_ref": "indicator--382827d0-c551-485a-b521-bcb37d7d774a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c37427b-c5b8-4bd1-88d7-9a16957c5bb4", "sighting_of_ref": "indicator--722d3b94-95c1-4ff6-90ea-3229af7abbae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b819437-7527-4a0c-8213-4f7e6fba7d2e", "sighting_of_ref": "indicator--d12a4290-3362-4c2d-a90e-cc77e5c07196", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab4ab3d-27c2-4eba-91aa-e2c8dd79d27f", "sighting_of_ref": "indicator--cf631c87-705d-4ebb-a582-3a072f9b85b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ccaac6-50d1-47da-9038-0660172a48fc", "sighting_of_ref": "indicator--d0d6570a-8d16-4e6f-a7f9-92c926c79de0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08db47ac-a80f-4069-9f67-ed582b944fb0", "sighting_of_ref": "indicator--44235b54-1bb6-46fd-a9f7-52bb1b421720", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5688639c-3997-4804-8d0f-681fb2ff7072", "sighting_of_ref": "indicator--d5e81bd5-ffc1-4e2c-bc1d-62b18c9d6658", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186ca193-fbc5-48e8-9f53-b5c04aa44411", "sighting_of_ref": "indicator--f5f8e1ba-69e8-4907-8d6b-6cc88c96d7f7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267d2301-5b10-4385-a5e6-1a63ceb1b59f", "sighting_of_ref": "indicator--ef2d9ced-7c48-4e10-b0df-3d8e97938886", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9110d977-acc2-4627-86f6-cb015fbe8792", "sighting_of_ref": "indicator--15dc0bf9-77c2-4e0b-9fdf-25a4b18d05b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d376de9f-fbef-4f35-979a-41dfbb690611", "sighting_of_ref": "indicator--5fb95967-142e-4803-a7ee-4b6316927414", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4e6750-49de-4ab5-ac56-00005bf4e558", "sighting_of_ref": "indicator--e60cfb3f-53f9-4038-bea0-f8639f5dcad8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafaed79-7d62-418b-b818-8ec399be544e", "sighting_of_ref": "indicator--3f6dbe0c-91c1-4c3e-9ba7-02872243a430", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba641d34-f55f-4c9c-a6e2-d96a7cc1dd34", "sighting_of_ref": "indicator--e4df8a6d-6751-424f-9bf2-3c936c48dbae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbac821-9255-481a-beb9-bb2284b0be6b", "sighting_of_ref": "indicator--7b3ccf38-40f3-455c-954e-c918c33aebc5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe79dab3-8a5d-42b2-812d-035e05ca8b44", "sighting_of_ref": "indicator--a6fdd07e-2ff7-41a3-bd6e-10114c9b68c0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbec6603-5b44-411c-987c-e0665cd42b21", "sighting_of_ref": "indicator--95562f1e-d777-44cc-8d1f-4e2a73c25670", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76550842-6f4f-454e-bcfc-aa9488516359", "sighting_of_ref": "indicator--6ff93efb-6854-452e-80cc-37035fe507ca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891066ce-c763-40f8-b639-fef9436d1d1a", "sighting_of_ref": "indicator--adbb084e-335a-4f4a-a45e-339935d74cff", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41660da-2a10-48ac-ba4d-e468c0c7fd2f", "sighting_of_ref": "indicator--8d3ef7e2-5144-407e-b25d-b1675331395d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a23faf-5432-44f1-b158-3c0faf057045", "sighting_of_ref": "indicator--4bb8b426-6a7f-4420-b307-d74d6b460d97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236adf8f-8fa7-4c78-939f-c5800ae73710", "sighting_of_ref": "indicator--4c75591a-205f-4493-8714-7619b632356c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01da5a0-95ec-4893-99f1-7af6397ff7b2", "sighting_of_ref": "indicator--b41fa14f-9441-47e4-b18d-c2aaee6dd603", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fb84fb-5105-4ff2-9385-a8fbac3b196b", "sighting_of_ref": "indicator--72e020fc-e779-4e39-a82c-c9d4591c0fdf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37125590-86f8-4fa3-bd59-057497f2b7b6", "sighting_of_ref": "indicator--e32fa1a9-bbe7-4a81-801b-1193aafd995a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4588e056-6d42-4e44-8617-a04d7dfbd3d0", "sighting_of_ref": "indicator--e45bf2ab-24c8-4929-a309-f82eddbcaaf5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28e0469-6027-44fe-8ae0-ec2969556164", "sighting_of_ref": "indicator--7a7bda14-b071-4899-b49e-5f51b8f03c75", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa4dc55-df6b-46cd-9978-91dba259b2bd", "sighting_of_ref": "indicator--4ce3e30d-e4f1-4caf-922b-4db9f8a2f25a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eecd2cd-c6ac-4fa4-82ae-e2cf6c7c1fd5", "sighting_of_ref": "indicator--decb8589-3ca4-4a4a-8def-e5c39096b615", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d140c28b-e63a-4520-9344-2f336f2a877a", "sighting_of_ref": "indicator--ecf7b11c-a79f-447b-9067-2e2d6f782c88", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b38119-3243-4a70-951d-e7c3f9e1524c", "sighting_of_ref": "indicator--d09ae6b7-82ba-4003-aeda-276bae9d35be", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f4f281-5c21-478d-96c5-ff44b8b6c8b2", "sighting_of_ref": "indicator--ad5a5df7-ed70-474d-8254-74126eef3499", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5790b2dc-8b59-4f26-9f4c-a4cc0d17032e", "sighting_of_ref": "indicator--97c73f38-79ec-417c-bf75-ccdbd1960a6d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca648e4-5faf-4ed5-8038-e3d23de6d7eb", "sighting_of_ref": "indicator--87ddddca-7c7e-47ee-824f-064af9fe7910", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a106bd65-8704-49db-bf88-9d99ecf542eb", "sighting_of_ref": "indicator--2c724cdf-4ad7-4062-b0ff-4a9105d85ef9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79406b99-fd99-4e84-916e-dc37eb85aaf3", "sighting_of_ref": "indicator--c568ea67-c8c8-4fe5-9ea4-bcaf90361fde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dbaf5f-6c7d-4ff4-a072-02e3dfdb694f", "sighting_of_ref": "indicator--83a22059-a8c0-48da-bd70-3c9d56100d0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7817a5-296f-4c9e-96f6-dfb66c1faa4f", "sighting_of_ref": "indicator--0b866138-9b95-4bd8-a348-f5c33b6e792d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb7fb13-2d47-4f25-8430-c0873e0d99ed", "sighting_of_ref": "indicator--460db471-1ee2-45b4-87fb-a7c5a221d017", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e4401-9e1d-4935-803a-23c0c17bff33", "sighting_of_ref": "indicator--56193c25-499a-4582-8030-15a716f53d21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dce3d8-22ed-45a7-8aad-1fd38efa00d2", "sighting_of_ref": "indicator--32922ea9-e2f6-433a-9517-3946039ab7ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b6b5c7-e2fa-4fa3-9fc8-726e4556af8c", "sighting_of_ref": "indicator--f628c8a3-b478-4cca-bffd-861158298d9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db02770-e2d0-4da3-a4c8-b0f64b4f1007", "sighting_of_ref": "indicator--dd88bb60-c147-446e-9a64-05661f522ab5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab40e9-98bd-4756-989f-f986ce84c89b", "sighting_of_ref": "indicator--66f1c3fe-00f8-49d4-8b18-dc98b0c1d7b4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b7b893-c43e-42c1-86a7-d0e697dff606", "sighting_of_ref": "indicator--0a1c51ab-71bb-4e7c-beed-497c5fb8f657", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ba41e6-3d93-4ab8-a8b9-57d7145d06f5", "sighting_of_ref": "indicator--315d24ad-b8cf-4dc1-aa3d-aaf657daf236", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af26ef3-fb2b-40a7-b19d-08d5d5b6b916", "sighting_of_ref": "indicator--03a357de-5166-403b-a922-5ec6839c42ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de3575f-0a1e-4920-a7be-de965c28de04", "sighting_of_ref": "indicator--854de3fc-309f-45d2-b9cd-0c3487dc0a15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc421ace-d2e6-4d5b-861b-9e7827617c80", "sighting_of_ref": "indicator--7518fa54-bcae-4387-89ac-c0aa02c42ddf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab69184-1c2a-4b17-ae28-be4e1b261221", "sighting_of_ref": "indicator--312645d1-d848-486c-9d39-054b7d2d0f34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836cbe92-3375-4df8-996b-9d6c66afd5ca", "sighting_of_ref": "indicator--e6582a7b-28bf-41c0-be99-7c0725dff87c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f75e11a-6221-4d62-94bc-aaacb8ea7498", "sighting_of_ref": "indicator--04d986c9-d518-4db2-adba-28bbcabfb47f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1437987-1a55-48f5-aa7b-f0f2316304cb", "sighting_of_ref": "indicator--7e313571-547d-444a-97a0-9f14326b9ae8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502fd703-4f5b-43a3-b52a-3c54667bb00c", "sighting_of_ref": "indicator--d2aa3d50-60c4-4802-a67d-b03a83f49c74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a72753-b8a0-414a-8604-0ad29c9c4f1b", "sighting_of_ref": "indicator--110d9c2d-3772-443d-a20f-00d3ba5d44cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c291887-88c6-40bd-a275-eb21e2c6ee2e", "sighting_of_ref": "indicator--98771d55-eadb-4177-973a-90a0c405cef5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ee87ca-b9dd-40a2-9c50-6408ee6ec7a9", "sighting_of_ref": "indicator--7f9910c6-fe0b-4b87-96ef-6e5c8673d86a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c34894-f6cb-4b16-b91c-9a6a0e7ff022", "sighting_of_ref": "indicator--e4aa9037-0d03-4562-a1b7-68ba1a2fae3a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539f01c3-9984-4b05-8510-ba0b4b7dec5e", "sighting_of_ref": "indicator--be7f2db0-d114-4c51-b9b3-52cc86bb211b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef51b6c9-eb66-4f50-93e2-2270c934e557", "sighting_of_ref": "indicator--dfd83e96-5ddf-4153-91d8-7004f573e510", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61e7bd-cc6b-4a40-98a9-0463ea7a7bcd", "sighting_of_ref": "indicator--4a49dfdb-1f8b-4815-b190-295e5d9a2125", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3d338e-7800-4e2f-b279-cd3a5461256a", "sighting_of_ref": "indicator--ed0ecd45-bfc7-4743-8d0e-b1610e55fb1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7d1c9b-cc43-4bd4-8654-b7030b55e812", "sighting_of_ref": "indicator--8373e5aa-effb-41c7-87ea-86cf9641d950", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c459d69f-48a9-4822-9c97-6f9ed2186b98", "sighting_of_ref": "indicator--8e0d7800-bf5d-4deb-bc16-e0adf914aba2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aec5e06-7961-47ff-9ab3-2296947b5a02", "sighting_of_ref": "indicator--714fca1c-07e7-4107-b933-0f6164c753c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c158b7-9bd5-4033-99e2-0e77a85cf626", "sighting_of_ref": "indicator--bc22fd1b-1ae9-48b6-ab42-096058b893c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed66624-8d05-4636-a460-5e842e2b8fc7", "sighting_of_ref": "indicator--bbd82114-2fe3-4c8c-80d0-d1401db7126d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d463ca61-5994-439f-86d2-6861f17fa00a", "sighting_of_ref": "indicator--01ccf411-bfd4-45f3-a2d5-a4f998d84dac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5a1a0-7d62-4998-ad4b-aa1f6d4ba542", "sighting_of_ref": "indicator--6ed980cb-04c0-43d6-b5e2-28fd3202c8e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a303080-2c88-4dab-8a7e-d55bda9b03a7", "sighting_of_ref": "indicator--8c4dc8fd-1096-4077-b79b-bfab3f07687a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea0e582-89e3-49e9-b2fe-8c4481188b49", "sighting_of_ref": "indicator--77cfb459-f41a-427f-b97d-8e8a906fa716", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24d026e-93d3-4e51-83c5-1857f6d6ef55", "sighting_of_ref": "indicator--6b328b0a-6d9b-4d56-a63e-ebe6601a24fc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb25622-8d34-4dc1-98b7-a01b133b82b2", "sighting_of_ref": "indicator--ec48bab6-8713-4679-a598-f2965ca7a034", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc46403a-7cbc-4ec4-b4a7-b8de0a8f6800", "sighting_of_ref": "indicator--edf27e04-b42d-4ed0-819a-0ec79125029e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a152e3f1-d89c-43e6-b21a-d15d6038c27a", "sighting_of_ref": "indicator--815f8696-955c-41c6-a5f9-a556e304325e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283e0e03-9e46-4ed5-98b5-b8356642f81c", "sighting_of_ref": "indicator--707a2a39-d7e6-4507-9b4a-8a249333f8a7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a27a5c-afde-4cd1-862a-03180fa80725", "sighting_of_ref": "indicator--f3a2666e-e926-4aa6-a755-55d31e48ecb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77afe9c-5b57-420c-af8d-5fb724561365", "sighting_of_ref": "indicator--a056c825-b3ad-4e4b-8f99-e102fce24918", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def245b2-8af1-4373-a9b1-14619cbd041c", "sighting_of_ref": "indicator--6bc18aee-dc52-4f68-ac66-e2485d3b17b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551a4421-1ba3-4a47-93b9-68815ffefce0", "sighting_of_ref": "indicator--b14e384a-3c4c-47e4-a5ab-c0072f85e540", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ece3abc-d4c8-4f97-9b12-676c3d57931d", "sighting_of_ref": "indicator--68713da7-49d2-4fa6-9cd8-138e5c6fe7dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95fed81-b2b0-4aa8-a3db-cc3d3f1f105f", "sighting_of_ref": "indicator--bbdf891b-db56-4c77-ad48-96572e753c98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892fbacc-09d8-4267-8f8e-3778310f4a9e", "sighting_of_ref": "indicator--ecd473d7-bda3-4e36-a815-37160b8b223a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715563dc-6a65-43c7-97d3-e994609dab4e", "sighting_of_ref": "indicator--6ccc3159-fdcc-44b0-bb33-eaf69b6b0e1a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32e229-cb5b-4cdb-a7f5-b78fc2482017", "sighting_of_ref": "indicator--8d0b2ea5-8774-4877-8c45-cea7b0c0a583", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd8f72f-85c1-4e73-9fcb-af3c1a7b98f3", "sighting_of_ref": "indicator--81da3323-e8c5-4229-bec4-13b40e3d2d9b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3263924-4d43-4c42-837d-a426fff95a64", "sighting_of_ref": "indicator--79fc903d-8c01-4d37-bf8e-50fd5bbfe6e0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b280909-3840-499f-93ed-dec4b4856543", "sighting_of_ref": "indicator--2da8eb36-87a4-42c3-854f-09f3a11551f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de54e36-be40-4a02-a2b2-3ce36b43cbf9", "sighting_of_ref": "indicator--4f1d8639-6fc4-4b7b-9f1b-83b51c3504c5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6b0b73-8ffe-486e-9be0-d591a86b9616", "sighting_of_ref": "indicator--93d0e39d-b447-4b28-9450-02deade85e4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91ae78b-d431-4de3-9834-c6e85e8b0902", "sighting_of_ref": "indicator--b52b7078-ed3b-416b-b28b-9b11f61b1222", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eafb5e-b40b-4c39-bc7f-e59e43361a65", "sighting_of_ref": "indicator--6a7619c6-979d-43db-832e-bda51c8bb259", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08440c18-97d1-4bbd-afe8-3fd2e8c9d0b1", "sighting_of_ref": "indicator--beac1e0d-19aa-48c1-8985-2b84acde04cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c97125-a1b6-45e5-ad41-a51260843dfa", "sighting_of_ref": "indicator--60496388-8366-4062-b32c-a41ad61febd6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ecd265-226d-4eda-af15-87ce54cc108d", "sighting_of_ref": "indicator--9de2938d-a07a-4ab9-9d6d-2165e64be457", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154d0252-2858-4dd5-b2ee-dc0950090a6f", "sighting_of_ref": "indicator--2560fec5-b7b0-43b8-86b2-24d808f1be31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527908ff-7dbc-415d-9217-b5ba868143a2", "sighting_of_ref": "indicator--b3bafccf-4ab9-451d-af77-83fdb8b59884", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee19cc7-7dfd-4da2-ac5e-ec554d35197f", "sighting_of_ref": "indicator--3d4ae863-0d9a-489d-8f53-9cf9b6750b16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c1062-2804-49ac-9b53-1ba731e4eba2", "sighting_of_ref": "indicator--022d6d55-1d1f-4e32-94d9-b6180a9d7b2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a4cd24-5466-42f4-aa32-b23e8583edc1", "sighting_of_ref": "indicator--2004887e-3c2a-4cc3-892f-5145a109232c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6a2c03-ed3f-4e20-afa8-6a5fdc3019ae", "sighting_of_ref": "indicator--0c4ce4e1-843e-45b6-bf1f-d64dd852814e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3d3eff-7915-41d1-9c30-c983eca0f5c0", "sighting_of_ref": "indicator--f80479f3-4738-447a-914f-2065dc44e1ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17f7ee5-1374-4c0f-9e83-643a3e4ad4a0", "sighting_of_ref": "indicator--2ee5cd3c-26b8-48e4-b950-71d20fa770ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ce8566-a59d-4086-951b-4e13f8bad2a4", "sighting_of_ref": "indicator--f7d6364d-4804-4d2e-9f8c-99bb2c965d28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be19fc5b-5b7d-4053-a193-75f0b69f4b94", "sighting_of_ref": "indicator--a3343dc5-bc53-4b42-a85c-e0fa8dcef5ee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf414be7-8861-41c7-8525-ae0efd94b27b", "sighting_of_ref": "indicator--b57a31b9-15df-46d0-b241-707f69cdacde", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3855ff9d-e540-44d0-a890-d6fde0a99e3e", "sighting_of_ref": "indicator--3741e688-f700-4f07-acee-d6851afb723e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408b34a9-5b8c-4b42-8068-5f39916cc011", "sighting_of_ref": "indicator--94b6ca1e-2efc-4691-9652-984a830df4b0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b73ae7-c391-46cb-8928-bd2eaa7df5e4", "sighting_of_ref": "indicator--c1d680dc-6f87-46a6-9813-7ad6a0c79436", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32643d62-c6e8-48c8-ba99-7c2e9387feda", "sighting_of_ref": "indicator--d5aaec83-0014-46fd-8ef5-8c7396743f34", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d620fd3-48fc-480e-a3a5-c40ec08f51c9", "sighting_of_ref": "indicator--3c2a9625-fe31-40d5-b292-f63bcac2b72f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9aecd5-26f0-45d4-be2b-5c2fe3dd81a9", "sighting_of_ref": "indicator--bd837594-74d5-49a1-b150-5fde2ca0b81d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19adc629-6c7b-4b17-b190-9972c8f97de5", "sighting_of_ref": "indicator--7debcb56-9ad4-482c-86af-f72f7df9d282", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6af74a-9756-46cb-a464-9fef746caa99", "sighting_of_ref": "indicator--9188dd93-13ca-43bf-8208-8714baf1746c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0091fdc-3f7f-424d-89a5-24ee0b7e04d0", "sighting_of_ref": "indicator--f599f29e-90d6-4cb4-ab84-4ce889de7187", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338c0eaf-c498-4fb1-9d55-edf5f4152112", "sighting_of_ref": "indicator--bdf9c784-03e0-4c58-adeb-25d326f8b372", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff37a18d-40bb-417a-9c09-84c7f628ea32", "sighting_of_ref": "indicator--65f2c2a7-2394-4f6c-8010-f949482d976b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda024a-6ccb-4105-9d69-a24b819a172c", "sighting_of_ref": "indicator--55012448-1163-4f66-94b6-39b85b033ff7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a967995b-d677-45ab-a955-d28e009d53f2", "sighting_of_ref": "indicator--061d7fa8-27c1-4c1d-b50e-3b41a1fecd0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a641b11c-e903-4a44-9f8a-af536baa8431", "sighting_of_ref": "indicator--f9878c93-0a0a-483c-a999-fa01713b0675", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7c5cbd-73b8-4379-a48d-ed374192265a", "sighting_of_ref": "indicator--2d1550b6-1e94-4131-8b68-f098f8252e95", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda838f-c45c-42fd-909e-19dd101b9755", "sighting_of_ref": "indicator--04856758-c2c6-42c3-8ef7-4db245a3e20c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81130c27-75be-4bb3-81ab-4a75cc59873f", "sighting_of_ref": "indicator--2c9cd995-b9eb-4dab-a61f-dcdde3dc4f73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c331e4c-9fe2-4990-b084-24498639c763", "sighting_of_ref": "indicator--a9a19123-be5b-4a5e-8967-253ac6b25818", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104302b7-8661-431e-9494-12dbbd4820e1", "sighting_of_ref": "indicator--e98b78ad-c17c-4858-ac0a-fe374f83aadb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16252de5-5389-40bd-9ccd-09f076b3c541", "sighting_of_ref": "indicator--5477da9a-f684-4f04-9eba-74764bf1bd19", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5ea650-89d8-4eca-9dc4-2561300684a0", "sighting_of_ref": "indicator--78db42d9-9e1a-4fc5-8d37-f0080a8d93d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96df795e-51c8-4700-8e82-5d7c4a9a348c", "sighting_of_ref": "indicator--8b2c5d4c-05a1-46b0-9ac4-9a52faaa94f4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5c0c1d-94d8-49d7-9663-072fb4a159c5", "sighting_of_ref": "indicator--ca917798-1f52-4e8d-a68a-7bd156caadae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c827671-afc7-441e-bd6b-28c6964aebee", "sighting_of_ref": "indicator--13da788c-b2f8-4584-9f4a-06740bd81ab7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09923fea-a552-4ab5-bbb3-22f99dcac737", "sighting_of_ref": "indicator--b48d4df2-0e8b-4162-8311-f47ab27afce0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096b4e97-f75d-43b7-a95e-6ecc5ce12b30", "sighting_of_ref": "indicator--593f2247-f7c6-4242-9da1-bb0d5ff62143", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67dfc08-ae1a-4bd7-a3e2-8c62bb041be9", "sighting_of_ref": "indicator--874bfbe9-7afb-4e4e-8c3f-bc167373e002", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a634819-1551-4d35-a8bd-bbe6e75cc153", "sighting_of_ref": "indicator--9703d1b5-30f6-4426-bcca-2dee6e1bd729", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c228fe53-0c00-449b-b477-0e5f309ae0d0", "sighting_of_ref": "indicator--4808a23a-c9ed-4f45-9254-414b48ef45b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9974e2-6a04-493f-8af6-eb539c71c438", "sighting_of_ref": "indicator--69abb578-5c1c-40ab-8a3a-e3a4c04ebf43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e18b90-84f7-4602-8da6-6f03ce8cb4d4", "sighting_of_ref": "indicator--b732af2d-e589-464c-b6bf-8c3a8ea1ac10", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f0be20-3156-42e3-a387-f261f5c35a84", "sighting_of_ref": "indicator--fe631e81-0bf5-439d-ac67-aabd2dbada2e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f339c4e7-66b5-4890-a238-9943fab1e41d", "sighting_of_ref": "indicator--18e685c3-4202-4f34-bddd-b5b6e9436083", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fc3c87-e906-47e6-9135-a2e8ac1b74da", "sighting_of_ref": "indicator--77940d36-660b-4cf9-8e6e-644baa85def8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2bcf1b-0736-46f7-b116-925204aec691", "sighting_of_ref": "indicator--c08710e0-d958-4d45-bcba-7eccc178a2e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac1327b-34b4-4c02-8e38-cff05c4badf7", "sighting_of_ref": "indicator--3e02e6e2-6dc6-48b0-b547-b4d5ba7f2f7f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2448b0-7020-48fd-a39f-f2bccc59a5fb", "sighting_of_ref": "indicator--23b4afd9-93f6-44c9-ab5d-5126a71b3364", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df0f63e-88eb-4074-80ce-9446f0459a64", "sighting_of_ref": "indicator--111f4504-d738-4bc5-b7f2-3eec07962be4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ca634a-afb5-46f3-b048-99ccd6429a31", "sighting_of_ref": "indicator--ad63f618-9e50-416f-a34c-0a33cae34161", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799352a7-45f6-4607-b801-e4c294816da9", "sighting_of_ref": "indicator--1144b641-a38a-4c0c-9df4-9e7b88bf2cc5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563cb7d1-99ad-4f26-9d91-98e32b39f022", "sighting_of_ref": "indicator--b4463e5f-be8c-40fc-9e2c-6d6b0d558adf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb073c4-0bd2-475c-aeb5-ab0e134c147b", "sighting_of_ref": "indicator--4afbc1db-4196-4163-abb5-3628dc0cf028", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665f9332-d59a-47ec-8d8e-2254380057e6", "sighting_of_ref": "indicator--bc4c3469-5145-410a-a129-09a0509b5871", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0422e81c-dabf-4714-879f-59df640dbf8c", "sighting_of_ref": "indicator--d6ed9a05-0c85-4e6e-aead-4a72d9e2bf43", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e52df-86b8-4a44-bf9f-86ca5fc36dbd", "sighting_of_ref": "indicator--f3e9709f-1b73-41a9-a23a-dfdd1cb478dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1d2004-8016-48b3-815b-974465ad54a3", "sighting_of_ref": "indicator--5856c386-9125-4efd-9592-55fc0dcae44b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897fd4f8-ee72-4904-bcb3-b0fac90d2eb5", "sighting_of_ref": "indicator--d28b876d-d21b-483b-905c-5ff423b4b5f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d50de9-ea6c-4a6c-b8a1-25bfdbc552dc", "sighting_of_ref": "indicator--9d4b4e61-5284-4f0d-841b-ee52de597aa6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abe6c0c-1145-4700-9375-fccecd6294c5", "sighting_of_ref": "indicator--6159a7c4-ca52-4cd5-962e-c4eea362e8e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316191b4-c5d5-4cee-a0f6-8e0183c18964", "sighting_of_ref": "indicator--ec5f9184-0009-4f68-8881-9e189cf18277", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ae0dce-7db9-47b2-a890-e858e9ef5f37", "sighting_of_ref": "indicator--7cae4c4a-d810-40f6-8f4b-5fe5c52c7ace", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888b884e-fe31-4825-8e11-03fec928dac2", "sighting_of_ref": "indicator--662c645f-ae56-4c08-a627-a8d25c491abf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d990e-db59-4322-a064-7b8c35ced2ce", "sighting_of_ref": "indicator--9d914c48-f72f-4480-ae4a-0b23cb762b87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b04491-a259-4876-aa0f-a0a259f12fff", "sighting_of_ref": "indicator--8638d8a3-7c56-44fd-a05e-dae22f62cbb4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798bf058-61b2-4bac-82d7-52329bb34c94", "sighting_of_ref": "indicator--22449886-9119-4e83-bda5-90bf0b848d40", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9604b47-7805-4cc8-98c2-41ac67b21b2a", "sighting_of_ref": "indicator--1f8e1bd8-b1ae-440e-ac71-90ddc389cc18", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1471dae4-dcc3-44ef-ba98-d765fb13b48b", "sighting_of_ref": "indicator--ce5840b0-0a9a-4a53-afad-5cc9c149fb97", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ee49e0-9996-485a-bb98-1818ed9f7537", "sighting_of_ref": "indicator--52fedb7c-1223-42e1-b3b7-364c4c5aa0e4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd1d041-6335-423c-8073-3e4b1d434b4b", "sighting_of_ref": "indicator--3e457124-f2f9-47e4-b9a7-1789932dcf28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598577f1-f1fe-49a4-bdf8-01310da86006", "sighting_of_ref": "indicator--fa3ff04b-f9b1-416c-9338-0a23ba08e237", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30c3e4c-9f7a-46cd-8a1b-d4f702296c8e", "sighting_of_ref": "indicator--714cf18f-6ca1-48fb-818f-de076424291e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2299b77e-cd6d-4ea4-8915-3688c79f5769", "sighting_of_ref": "indicator--ac8aa5bd-839d-4475-8e78-47d13a89ade5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d523af2b-3086-450b-8e32-8bd6cde566a9", "sighting_of_ref": "indicator--6bbbf7f7-99bd-49a6-b360-c08ff98f2182", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea242ea9-2c78-491c-b69b-965264371e69", "sighting_of_ref": "indicator--b8f2b3e7-2034-4eb3-bfe9-8cb018a794c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043c9daa-6590-4dcf-9851-917468d4d19a", "sighting_of_ref": "indicator--d7b562ec-e77e-4727-9fca-981d1999f608", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6b9596-ffa6-4d14-ae33-5a087fdd2505", "sighting_of_ref": "indicator--787d9089-7cd1-4363-b051-fd66453cce3d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31de940c-f7fc-46d2-b791-944821a4bb97", "sighting_of_ref": "indicator--4188ce18-8f38-45de-bb57-7e7e4c7a12e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c352b0b-459c-433c-9fcb-af2cf2db91b0", "sighting_of_ref": "indicator--1e8e1043-40ad-4851-94de-848d23642a55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d33645-070d-41af-9e0b-dc460a6c685f", "sighting_of_ref": "indicator--f89067d4-82cd-4a07-ac9e-95833d8dc027", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc81e74f-9ebb-4247-abbb-f2ce2d20b436", "sighting_of_ref": "indicator--e8fde94b-1511-4c51-9435-113cc53ad1cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d65d5-ddce-48eb-a046-d021edb2745a", "sighting_of_ref": "indicator--6d61a3ad-c502-4540-84b8-6db56db1fb94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ad7304-a521-420c-9c5b-fab6a6439e8d", "sighting_of_ref": "indicator--ba6f56d3-9b75-4014-8817-005a34036bb9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27239c86-6ef8-4bae-a160-5dc8233d8621", "sighting_of_ref": "indicator--3a6a9926-a368-466d-b95e-bd56186c9934", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0936b2-ef7e-4ef3-905a-c5a6c1713b50", "sighting_of_ref": "indicator--1a115489-ab07-4f5a-ab05-9de0dd96828e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdabf6d4-0c7a-48f8-8e1f-c2703d30e1ec", "sighting_of_ref": "indicator--270810c3-6bff-499b-aacf-bdcf71baed04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0fd891-939d-4309-aae3-6e170bb50fcd", "sighting_of_ref": "indicator--51e77c21-3436-4752-9183-d2d5a6a18eeb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f84fb6d-2d71-4ec0-963e-cfa690fb165b", "sighting_of_ref": "indicator--d68a90b3-971c-496a-af6b-6be3183f1e58", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c22fcc-3c3f-450f-8769-6558f3f015fe", "sighting_of_ref": "indicator--4e8e16ad-1262-4dda-bcc9-2103fa6b5573", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b2c7e2-6eb1-4c1d-93ed-baef57636086", "sighting_of_ref": "indicator--bb36cd88-4b88-4081-96b6-55a9d3550d31", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59b7887-dc55-4c9c-b722-c4d6d560fba7", "sighting_of_ref": "indicator--8e924e1f-6ff9-476b-a2f7-139ad430160d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dc0397-7986-411f-948e-5edf1cf67b43", "sighting_of_ref": "indicator--9a55e56b-d74b-4418-8a93-d60092edc34f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e87116c-8c72-4a5a-8f51-d1db079a3fe8", "sighting_of_ref": "indicator--672ba8e2-a801-4a35-9c4d-1124f8dda9c8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f47ed8-361e-497f-8058-98c503f85a85", "sighting_of_ref": "indicator--eb43cc23-3fb7-4332-b850-4aff6bff401d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6a72e-8b60-4aa7-a927-2a055327be1f", "sighting_of_ref": "indicator--aeae0b21-0088-459d-9719-bd315f973f35", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2523b330-fb66-4201-a9ea-9ba7fa2f25c3", "sighting_of_ref": "indicator--cab1e73c-c567-41eb-a54b-11d8a306dc3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb0056b-9248-4611-99ef-45e03d7e8f34", "sighting_of_ref": "indicator--04b844c4-ce40-444f-93c8-1056c0a5307a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c913cc0-5011-428f-99a7-533a9e3d1862", "sighting_of_ref": "indicator--19ecb3c5-7f01-42d0-a9c6-346d71ca395b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e699207c-c796-47aa-a221-e23a5ff59521", "sighting_of_ref": "indicator--fbee3c61-f0cd-45aa-81d8-6cd6755973c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a924c65-5661-4b5e-b010-a81901b948f2", "sighting_of_ref": "indicator--70c4b00c-6e48-44a3-bc07-d798dfceb943", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff54ae3-58b0-4489-8d37-10dba29f0430", "sighting_of_ref": "indicator--bb072d63-512c-4002-acc0-f4d925a513ed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f195dfc-c186-4761-aa43-646b81ac9b12", "sighting_of_ref": "indicator--7c4dd0c5-f834-42eb-b994-9387b96f1e61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb1f6c9-08c1-4cc9-a829-84b5baf17b3a", "sighting_of_ref": "indicator--10a3f76b-0584-4fbc-a162-59a0879a293a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d146728-1c6e-43cd-95a9-9216a78afa82", "sighting_of_ref": "indicator--6b92769e-1571-4efa-8ddc-4cbc555f599e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85b3919-65e0-41cd-8b66-e3461b2aa461", "sighting_of_ref": "indicator--9ac23380-e6e6-4d1c-84e9-f7bb831414e5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e3fa2-6791-4b49-aa82-82f6fb9c9301", "sighting_of_ref": "indicator--90535118-6f64-419d-b36f-92fc60b74cd0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff7be8-79b1-4432-b677-19232c5e9f51", "sighting_of_ref": "indicator--dc779daf-0c9b-482b-b6e6-7f4517a7602b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37bcb54-2d24-4e72-b301-839d2c5f55cd", "sighting_of_ref": "indicator--cbd9c4b7-89b8-45e9-9160-0c26b50d03f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3174c3b-7e8a-40a8-a560-6bef6169d16d", "sighting_of_ref": "indicator--841f9029-546a-48eb-b209-9646e17cc289", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05233403-063b-4cb1-8e8f-18317e035521", "sighting_of_ref": "indicator--1fbb7a4f-2a05-4867-b963-a6f51e9842de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14da235a-4d95-4ab2-917a-99cf68973e37", "sighting_of_ref": "indicator--35a3917c-f358-4c4d-a331-42b204a125f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c635c832-0e33-4a1f-9b83-57196018cb5b", "sighting_of_ref": "indicator--a2bf7a91-47d9-4ff1-b529-d4c91cd6c784", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c9b83-bf24-47f1-81b6-95d9b65e9d84", "sighting_of_ref": "indicator--0a57f905-291d-4ca0-90ec-9e68ef32a082", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa92611f-513b-4b92-ba47-4d4a7052114c", "sighting_of_ref": "indicator--53d62c75-83f7-49ec-90c3-703b548cbf17", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa4afb7-b924-4941-bfb6-bc474ff7783c", "sighting_of_ref": "indicator--ecab6269-71f0-4013-aa0e-d5a859025ec0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d1618a-80f5-4aad-af02-a6edb6ca3cda", "sighting_of_ref": "indicator--e80bdd91-d349-41f2-8f1b-9eb3898a3611", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39370e19-111e-4ee1-8bd2-178c25c644d2", "sighting_of_ref": "indicator--7f7c667b-21b3-43d6-983f-8064867d2381", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbc7aac-654c-4bea-9249-7ccf4e2c6c63", "sighting_of_ref": "indicator--1be072ec-256d-4b26-a4aa-4aec22d4d707", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca921bd8-fd77-474c-97e1-fd7c2df03fa7", "sighting_of_ref": "indicator--dde5943b-1ab0-4235-8bd3-c44b9e7af285", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c22c4d1-dc6e-4bd5-b2ce-a5b9c2f73d14", "sighting_of_ref": "indicator--ee04516a-49ce-48f8-b5bc-13c83887f961", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9d3a63-3dc1-4d92-84b6-dad236e22c38", "sighting_of_ref": "indicator--4de6f809-9f0c-4f46-88de-3d907cfbee8f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77705d9-361b-4fb1-8855-b9b7f2891a5d", "sighting_of_ref": "indicator--504b67a8-b1bc-4e0d-83d0-4306a16b7503", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383bffa9-23b4-4427-ad1c-c480d7f6918f", "sighting_of_ref": "indicator--bb0e8b79-a72d-48d7-8d5d-dfbd8cbaab01", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d738fa6b-35f3-4f31-921d-2c5c3270c1b6", "sighting_of_ref": "indicator--1e79b3ba-c43f-4a84-80d2-381d7dd63955", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507dd862-5932-408a-8045-1a84ef5f9ee6", "sighting_of_ref": "indicator--0823cd50-b6d2-4d61-8295-2f7ddaceb669", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36413bb0-be2a-4111-968c-da1ffac745b7", "sighting_of_ref": "indicator--099e33a1-bf40-4726-b6e5-483f00bd58d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec86e93d-cf9f-4100-9466-79d96bbd91be", "sighting_of_ref": "indicator--ca45cf0a-0a29-410b-8692-8546f4e9d738", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08962c8a-c1c6-4a54-bf7a-5647f58f73d9", "sighting_of_ref": "indicator--a3954e02-d32f-4b03-938d-2f51a3f6be74", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5172c19f-5222-483d-a4b1-304098ffe6b0", "sighting_of_ref": "indicator--057c53e4-8a4c-46dd-aef7-1e9ff7a85782", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3954627f-2161-495d-8706-130ab095f511", "sighting_of_ref": "indicator--e50f4510-a1a0-47de-b38c-f3f67ab5a465", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3b3ba-b35f-4956-aa0e-5c85ff25cfbc", "sighting_of_ref": "indicator--e5dc7cca-f03b-4a9f-939a-052e65c058c4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e092a950-abb8-43f4-9056-3fe4a3e1da17", "sighting_of_ref": "indicator--f10f9e7e-91b7-4210-b041-b22892e60ed9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9314dd-9256-48cb-9b88-6e6bbab10107", "sighting_of_ref": "indicator--99fcc3f4-e829-4d8b-a931-4e29f5547572", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506cb13f-adc0-4b57-a570-5f3183e83a78", "sighting_of_ref": "indicator--eada0275-8eb9-4090-bd9c-eccff57cce57", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2b8e6a-99fe-4981-a7fd-d42c41f358e9", "sighting_of_ref": "indicator--8d16d846-7e44-4dcc-b6bd-c0054fd69e93", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69aba56-2840-4c3a-86c8-cd0909e6cf02", "sighting_of_ref": "indicator--05a8cf1b-0de4-425c-816f-f822bdabaadb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ed750a-72c8-47c3-a52c-8cea8e9da2d4", "sighting_of_ref": "indicator--4a6b74e0-0556-4678-957a-fa8bf8168f96", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27969dc2-82f6-4f9c-9b8d-1eecc57acb8d", "sighting_of_ref": "indicator--3355f677-4be9-48a3-84e8-9a736c3f8be6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcca6544-8189-4f15-97ff-2ed000ef7856", "sighting_of_ref": "indicator--365a6e9a-e3bb-4f45-8663-d76b76f9b8cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed11810-12da-42c6-b1c3-e2de9834075a", "sighting_of_ref": "indicator--15aae1a0-012c-4451-b6f9-4385695c8b89", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e245243-30f0-4485-ae11-87abde286cd1", "sighting_of_ref": "indicator--2eab92e6-7a5a-4357-af7e-38299914dfdf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356484c2-24d3-4473-a733-3fbcfaa0d087", "sighting_of_ref": "indicator--6b662340-b205-46c6-926c-15f2e2a8ce46", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0126a1b9-b794-4070-ba40-4cb131bfe79a", "sighting_of_ref": "indicator--b2ff0fd0-a76e-4971-8ddb-d0dd323501ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e61ea5-9dc1-40af-8d4b-b3ad46ff4584", "sighting_of_ref": "indicator--c45f435f-e68b-48f8-b9c0-21831450487b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea71e3d3-244d-4dc1-a249-84dac0f6f67d", "sighting_of_ref": "indicator--03d1e8f3-74b4-4430-b6f4-345e9fa9d579", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a71ff90-e650-4e8f-96c2-e5c9371fac9b", "sighting_of_ref": "indicator--0ad28fae-6f56-4b75-a1c4-3f4c4203106b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f074e2f-67eb-46bd-b07a-9d80506dc3f1", "sighting_of_ref": "indicator--0aab4ded-064e-4849-a598-b7b045083887", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c874b4c9-9f4b-4828-b097-f56d96ed0bb5", "sighting_of_ref": "indicator--514c7023-fd4e-44d5-b60e-949b6cba35c3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d1cfcb-8b11-4dbf-ab34-62ab67be7212", "sighting_of_ref": "indicator--f21eb16a-1102-4590-867b-8496d63fe7b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56674e66-71c0-4240-8cc7-fc5bbd0264ae", "sighting_of_ref": "indicator--d1514dbf-aef8-4365-9dd0-d432081a6446", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2771c940-d2ae-4242-8244-8a888a5d1d89", "sighting_of_ref": "indicator--bab74f24-3e4b-48e7-8b34-e981c9dc7456", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275ce9c0-03da-404a-84ba-c24753b9b9c6", "sighting_of_ref": "indicator--49ea9943-cf5e-4641-829a-a87c9c57311c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0a0446-c64f-4ff0-9a85-98ebc338e937", "sighting_of_ref": "indicator--69652c5f-bada-4f68-a0e3-2584866aa894", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e09e16f-a2de-4235-9c3a-b1ccb61ae1bf", "sighting_of_ref": "indicator--8e450a6f-739a-4c7b-9891-ec976d6a53fb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fc9dcd-9656-482e-a723-1a3ef7a03e58", "sighting_of_ref": "indicator--a0ec7c0c-39da-4171-b841-383d9b956926", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0027e2f9-bc30-4e41-be96-a7ae7d2499a7", "sighting_of_ref": "indicator--e70285ea-f7bf-46e9-af57-41ea390a279a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3b767f-5529-4456-abaf-2ddfccd1b4ac", "sighting_of_ref": "indicator--77efdf92-3e41-499a-a9e4-7eaa0be72c1f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea6e38b-d1ce-4d21-ac13-a21d471eef8d", "sighting_of_ref": "indicator--7bb20840-89a2-4bfe-ab34-479ac9df2f77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae725f-ed01-47a0-aede-42cbfe16146e", "sighting_of_ref": "indicator--29e1949e-72d9-4093-a292-4cba1f977c6d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d172af-7639-4158-9413-7f3e89e9699e", "sighting_of_ref": "indicator--59f8dc84-6cad-452e-93c5-ffb656f5e18b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7228ff4-7ac3-4af2-b6f5-db199848e853", "sighting_of_ref": "indicator--6d295623-7a6f-4d9d-a81f-da97a5952d3c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83730148-ed46-449e-b979-3362500fbbf0", "sighting_of_ref": "indicator--9d5eea51-167e-473d-813c-6d2d890bc95a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e5f938-d0cf-4040-9ff0-0e6ed90a85f0", "sighting_of_ref": "indicator--81d41153-6d26-42e7-ae5e-1ff92dffcd8c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbf2319-2f7f-413f-bda9-0d1f045081db", "sighting_of_ref": "indicator--d5074dac-0300-4d1d-b006-659465836bc1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd619f9-5db0-45cd-bb96-75cb1e51befc", "sighting_of_ref": "indicator--a4c330ce-8de6-44cf-a4d5-cf5fa4cacae7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704c055a-6ba1-42c4-84f5-3a47b6a959e8", "sighting_of_ref": "indicator--f62bbc1e-0a21-48b6-abfe-f5789f6f987c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be45595c-c1df-477c-8e2f-694bd86548ec", "sighting_of_ref": "indicator--a71b47bb-5578-4d13-93d2-42a01b8e6b5a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7038f7e7-5ce0-4d9c-b039-d58728815694", "sighting_of_ref": "indicator--0d042693-c275-4afa-b3c3-d8e634f0f298", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d03e3c-fab2-453f-b504-e155d6e00099", "sighting_of_ref": "indicator--596f2502-899c-4593-9ada-5916ad365c4c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cbeed3-da7f-48a9-b3d5-401d79c394ea", "sighting_of_ref": "indicator--8dcfe6ed-fbc7-42d3-acce-f3a94cd73a9b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195890b4-d0ac-4a3b-b97b-75d4151ae01a", "sighting_of_ref": "indicator--943b0aad-f8fb-4c2f-9ce9-632f44f9c1f3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c04dd8-0d8b-47e6-8acd-1a8dcd1cc72b", "sighting_of_ref": "indicator--cb6aa4f2-c750-40ab-a58c-bb2acebcb22a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c0408c-da7c-48e6-abb0-0e350deaf441", "sighting_of_ref": "indicator--2ab262b5-bf13-4e70-b822-9403068e5e78", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b758e4-ce96-4663-9c51-254336a457de", "sighting_of_ref": "indicator--1bd921fc-76dd-400c-ac4c-18daf870d25f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c555a0e-cb25-4627-8038-06169c975af5", "sighting_of_ref": "indicator--4a18518a-9abc-49f0-9236-874d6ad94063", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29be7a40-79aa-4507-b1a5-b3785c50c923", "sighting_of_ref": "indicator--f294d972-4512-410d-b66a-a7e1e313aed3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843cd73e-ac48-4def-862a-741665fbd66c", "sighting_of_ref": "indicator--a0bb2c92-065f-4323-ae27-5c92c5deff73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9ad77-380d-4c68-bac0-c55f8b1d75a1", "sighting_of_ref": "indicator--46bc40ef-4a6b-4c51-a695-90d259a7ff61", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83819347-21cf-480d-bef3-b6df58566bce", "sighting_of_ref": "indicator--590522db-d8cd-44cd-bead-463f36ac9f00", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cca7c8-77cf-49a3-8f51-0f6d235e23e6", "sighting_of_ref": "indicator--3c1e8bbb-f082-4ca1-8f3b-b51c11588686", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475a1829-2257-4c9a-80db-1bf49f16e929", "sighting_of_ref": "indicator--1ea228d0-147c-416d-947b-905f3328ee7d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3f7cc4-2ab8-4ea6-aaf8-b449b0a3e473", "sighting_of_ref": "indicator--42cef19c-0f1e-4a0a-8678-5b5acb3d6288", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd069b69-2c70-48b8-9b95-c2d33d0b23c7", "sighting_of_ref": "indicator--ee81eff9-900a-4d0d-b1c9-2303f4a75189", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8630eb-28e3-4d18-af23-1fc7665096b1", "sighting_of_ref": "indicator--88df4b14-b2a7-46ac-a1af-6e7f6c428745", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f05494e-7a7a-4914-ab8f-360901b07876", "sighting_of_ref": "indicator--f3d64e56-3f6d-4ccd-87df-15ec395b08e7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78874bbb-8684-499d-aa8f-3c1ff560dcb3", "sighting_of_ref": "indicator--a5b260ef-43ad-4b44-867d-977cf0875012", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753fbee9-0cbd-457e-8881-aa3398e494f3", "sighting_of_ref": "indicator--4723b7f3-b901-480f-ae10-2657361922d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7c7e47-719a-4ecc-ae83-2b08d0506451", "sighting_of_ref": "indicator--b6cbd87c-2bcd-4a84-bbb6-1bc9bc9b68d3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de2ee9c-49d6-44cb-a779-1ba675704541", "sighting_of_ref": "indicator--85727e29-57fe-4b62-b07e-78fda56809c0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f187d142-3755-4a07-a9fb-4c241695d706", "sighting_of_ref": "indicator--aa62781c-386d-4c78-a8b1-31fd9450db27", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133a4512-05ce-45de-808f-e6facdccfc2a", "sighting_of_ref": "indicator--cb311b18-bb5b-4ba3-97ad-7ad10ee3bb56", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7adb17-702b-4007-bbdc-a1a3621b7810", "sighting_of_ref": "indicator--8cf548f8-95aa-4740-a836-f6c90eb946bf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977248cc-ce1e-4a73-a118-d72ee610e722", "sighting_of_ref": "indicator--5b3d89f8-7a1b-49a6-9228-dd458b89464c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efd4495-2491-4767-b2ba-31446d67e035", "sighting_of_ref": "indicator--70b63282-e051-4009-ab96-eb5ce8d041e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567b3e2e-906b-4a5a-91d2-2533e0003e36", "sighting_of_ref": "indicator--fa7b4e5b-091b-4d0a-8800-79d07972c3eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3728d33-c610-4bcd-8a97-55e95a9924ae", "sighting_of_ref": "indicator--42839d1e-8686-481a-a327-2ecf1357a128", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff570432-e833-4337-ac3c-c56df1519512", "sighting_of_ref": "indicator--1556ee78-e778-4910-9187-e43074581bb7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fa5e35-3b1f-4e3a-9bd0-deb686e6301d", "sighting_of_ref": "indicator--63a3009b-7716-4014-8ef6-82147d45462e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379534b2-c0ed-43d6-89b0-d016d2b5b839", "sighting_of_ref": "indicator--a9615743-062c-4ee0-bd1b-97c4ee1d6748", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801351ba-3d22-4e2a-a76b-6172dcbb9f72", "sighting_of_ref": "indicator--6ecc2d0b-adc4-46e2-a5a3-6dc6fbb8d2dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e61d5b5-ceef-47c5-82f9-7fb26e797816", "sighting_of_ref": "indicator--605f5b90-11fe-454b-b9f1-de0e7bbfcdd1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eec1c66-cba4-4976-b48b-68f7609b7564", "sighting_of_ref": "indicator--d78c70c1-c479-4c0a-9908-fa00911616db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71642964-3a0c-4cf9-9755-078eaf03e039", "sighting_of_ref": "indicator--d2923dd2-bc01-4b22-81bb-d966826c0c13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18339e3f-8935-497c-a86a-570bc8db25df", "sighting_of_ref": "indicator--61902f9e-e8c1-4872-97fd-86af15b932ae", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2672bd01-c271-4602-b246-8e30473ecadb", "sighting_of_ref": "indicator--82146e47-b0ca-467d-90f0-a03804fa1331", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20671bb7-b820-4f8f-8ccb-4060ec3b34f9", "sighting_of_ref": "indicator--4287fcc8-2d83-440d-8b0b-4c4b30f1f843", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f3892c-2d5e-48bb-9bc2-c9d6e60c8331", "sighting_of_ref": "indicator--eeee8070-5d1a-46fb-85bf-237d9bf4c09f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d20e17-5c1f-4a07-9f38-b06f424bcd41", "sighting_of_ref": "indicator--600d4036-52a7-4b27-88e8-810fcab108fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2996a77-3d19-40ce-8aaf-3eb7f204364e", "sighting_of_ref": "indicator--8fef4f0d-c3e6-4c08-9654-e6061f38f2e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca49361-a948-4eb4-ae4a-aee3dc4a49d9", "sighting_of_ref": "indicator--152e7073-f6fd-401f-ac6b-2efb052e805a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc765e7b-ab61-43ec-b601-5cd2035aeccc", "sighting_of_ref": "indicator--9f125161-e720-44e8-93e7-75bd4ebe0c66", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07360b1f-08ed-43b1-8d91-08bdcd4a59d4", "sighting_of_ref": "indicator--d09bb02c-1111-40d6-be81-b32109056fed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7030e-518c-4cb3-8c8c-0d2f7a9d2112", "sighting_of_ref": "indicator--9081bcbe-a731-4fef-a2c4-83217d9623fa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9752ee9e-b5da-4803-a02d-b5341e0242c6", "sighting_of_ref": "indicator--4f0d75d7-083d-4dcb-bea9-22a15f62a06b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f31656-e1e8-43a6-9d6d-103bbc652856", "sighting_of_ref": "indicator--7a2abba8-c725-4087-a1da-2809d6e7420d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240cbd32-ed1f-467a-995c-e7d1b36e127b", "sighting_of_ref": "indicator--ed64edce-ffdb-4c33-a34a-7d8533af57b9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aadf942-7998-446c-a4bd-2ea99b12cea2", "sighting_of_ref": "indicator--fd713c7b-3589-47fc-a8d0-88d4f68d4388", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e879ce28-fa68-4ca6-b5ef-409b830d3801", "sighting_of_ref": "indicator--27b17e9c-b254-49f7-a080-861fe8b8345b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4638fd-6688-4793-ad75-21ac4e18a61f", "sighting_of_ref": "indicator--e73d7942-61b7-4d98-a477-dd39b29b9eb0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5207856-6df8-4623-9a23-c9d6641e1e04", "sighting_of_ref": "indicator--7e361b29-9c05-49a8-a8e9-2359710671aa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07429a5e-b211-4274-adfa-a90c3cd7e7a0", "sighting_of_ref": "indicator--04b3047a-89a6-4c92-aab7-6a267112f807", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c55f35-dc01-4552-acba-995bc873d508", "sighting_of_ref": "indicator--55c89198-a116-4def-bcea-fc6930cbac7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dad4ad-592d-4452-b58a-22f881a1f93b", "sighting_of_ref": "indicator--60bbbcf7-cd49-4d65-9446-7d9b1bac439b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe24bb8-ac47-4e99-9a28-1943d3ccaf73", "sighting_of_ref": "indicator--f86724f4-c741-48b5-8a7e-241be37966ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46b71d-7a9b-4680-b5d7-2c6d9e968aa4", "sighting_of_ref": "indicator--d0eb186c-053f-4429-a103-682a83dd8e9a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f5574b-1226-49ac-a553-ea764b011e30", "sighting_of_ref": "indicator--57bfe122-6ee7-4079-b24f-65fda02670bd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555db536-2b9b-43a2-8e71-5bb83ac6a22c", "sighting_of_ref": "indicator--59a4d103-dfe4-4e62-a6c9-bd1c1dff2df9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19740fa9-cc33-479f-8b0e-148c08de87e6", "sighting_of_ref": "indicator--fcce5cd1-0ce7-497c-8a44-dabc800ded87", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf031ed-f597-4721-a1d6-cc4d3facd88d", "sighting_of_ref": "indicator--1db578f1-7cdc-42a1-97e5-832e486f11f2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80af47f2-8621-4e04-9fc8-85e7e4763912", "sighting_of_ref": "indicator--700c2b38-2007-4b19-b5cf-acb406e36cd6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facd0608-d4f0-496d-965c-73081a278078", "sighting_of_ref": "indicator--241b5259-f936-4ee7-aa81-5b3413b22745", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64de3e4-4c6c-42a4-87ec-b269348a302c", "sighting_of_ref": "indicator--ef1c2fdd-fda9-43f7-8cf5-94d7953f5eab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efeac7b0-f0df-4093-b40b-ae927f415734", "sighting_of_ref": "indicator--614e979c-0c0a-4005-aef0-9bfc2c788a6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289ef9e3-924d-4451-8a7a-0635574b9bf3", "sighting_of_ref": "indicator--b0a2a065-2a09-4f4b-8b4e-ed02c76e1cb1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7441727-6de0-45ba-a6ab-4d302d1170e0", "sighting_of_ref": "indicator--5c4d7dee-6a0c-4f14-8217-22f6b8516d5e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead6bb2b-1683-4858-8df2-b8b5f17bed45", "sighting_of_ref": "indicator--9d4735a5-07cf-4e00-b42b-5d4282fd0452", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2664be8f-7033-4075-973a-3cb777a4e962", "sighting_of_ref": "indicator--7bfa25c8-286e-49a8-bc6d-9d303cba7e48", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5103eb2-93a5-4cf5-b63b-d7d410ae83c3", "sighting_of_ref": "indicator--e0c0d7d9-6eab-4420-b5c6-acc51785f8b3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124cf4ff-a11e-457f-92b1-113b9ff7422f", "sighting_of_ref": "indicator--f9d65972-3048-4e15-b97e-f7d350b8c974", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c0a5a8-e36a-4615-989c-6e35d64fc2ba", "sighting_of_ref": "indicator--b5bddc92-ad84-442b-9119-841c95be6a24", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167052e0-5d25-40a2-a7e3-492e69f04522", "sighting_of_ref": "indicator--0fb88bb5-5246-43e7-be9d-922f2949b720", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1662c4-198d-4de1-9b50-f12bdf4793e3", "sighting_of_ref": "indicator--bb0cba57-a428-4111-8381-dbbbb7519fed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab49d5b-4944-4a83-a2af-acd3a35602fe", "sighting_of_ref": "indicator--26ecee84-9a2f-41d6-9ae3-97cf29efb340", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a306cb5a-e980-404d-a67d-9ce9331fb0de", "sighting_of_ref": "indicator--87ab8710-5b19-4fdd-8c23-b6d6498efe6f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc001f43-4d8d-42d1-b035-993013474623", "sighting_of_ref": "indicator--6662d467-1cc9-48bf-850f-b08dd83f788a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cdbfdb-2fad-43e8-9a3e-818b3258a5d0", "sighting_of_ref": "indicator--0138dd51-4454-4596-b0d3-501832cdc84c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b232bc-bd0d-42c7-acb7-9779c472dd93", "sighting_of_ref": "indicator--32afb076-140b-4b66-afd7-decfe2b9b19d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aebe57b-58c0-477c-8843-2f89e7a62dfc", "sighting_of_ref": "indicator--ce5e29c2-41b5-4442-bd69-70e1593137ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc89d0-2aa6-45b1-8ce8-ef74fdb0d120", "sighting_of_ref": "indicator--8e2b196f-93a1-4799-97a6-e2ea9e0b16fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61357ecd-4aac-4390-be72-ed4b81509106", "sighting_of_ref": "indicator--4050998e-88ac-4588-ac7d-1cf019894f4e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50500b19-c8b1-4605-9702-d2927c8b05b8", "sighting_of_ref": "indicator--f1118e2a-87c4-4044-b696-484af369fc66", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fae72d1-5647-453d-9ea3-976a257dce87", "sighting_of_ref": "indicator--9b3d596c-a075-435b-8c30-b27c511b475a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa223c2-2ef7-4f3b-9128-58fa336353a1", "sighting_of_ref": "indicator--6a833534-4835-41b8-91c9-a523dd4c4aaa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038acd62-0334-4fad-9c13-969dcc300df3", "sighting_of_ref": "indicator--8e79b98d-39b7-49a4-a7d2-d4fe226dae55", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592a2e78-16e8-4051-8715-909c70f4e48d", "sighting_of_ref": "indicator--8d1fd1e1-4abe-48a0-92fa-5f894afeb232", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab392b59-0ea6-4211-9d57-fd2b92a896d9", "sighting_of_ref": "indicator--e4dbdf3c-04b0-4205-b1d8-bb8e79e28f15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12a4d04-9fb6-4816-91af-839e2cb5615d", "sighting_of_ref": "indicator--03f42f0c-e20b-4fa9-8e80-92b6d734a1f9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8330e5-bec5-48a3-bf6f-c8352ef27c41", "sighting_of_ref": "indicator--67406c17-b4f2-4eec-b532-c5d27b860377", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9241dedc-d83a-4436-86b9-9f0975b67fa3", "sighting_of_ref": "indicator--e4817732-ba32-4f35-a335-1db22e09f7ea", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6c8e39-bb75-468e-8c60-57a12fc75c93", "sighting_of_ref": "indicator--16a37aec-dfc8-4c9d-bbbb-870ede46342b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df473d5-265f-4297-8487-1d45372cc9f7", "sighting_of_ref": "indicator--42fcafc3-69e0-41c2-b501-dadf59ebf87f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e7746e-661c-4b77-81e3-9a3cfcc7351d", "sighting_of_ref": "indicator--50024220-5115-4e31-99c4-9ec3e5430586", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c26468-20c9-479a-aa63-e33111e7d60e", "sighting_of_ref": "indicator--9f896d44-1a87-4c00-b3cd-29c82074cce6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe39f76e-a1d9-4c18-ba07-cea506f097dc", "sighting_of_ref": "indicator--b6533b22-0751-4db2-89f4-5201b3bcc80d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382174ec-b9d1-4e83-9bc7-30d466169197", "sighting_of_ref": "indicator--6ad08615-5af6-4524-a691-936f6b6b6bef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbed539b-34c5-41ad-ac66-c37aaf22788c", "sighting_of_ref": "indicator--11727ac9-0309-46eb-8386-267633de8ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351327c8-4ade-4c7d-bfa5-4a33568463ee", "sighting_of_ref": "indicator--bb4a7a9a-22df-4a44-914d-920db5e62ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456fba60-f893-46c8-a5ed-9e95231dd690", "sighting_of_ref": "indicator--21fc09d8-2b54-410e-b16c-b6c414341af8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37b357-71d2-482c-90f0-83db26569ff8", "sighting_of_ref": "indicator--814430ba-fd46-4a76-8782-2e1f12da3cf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b4e262-a0ee-4099-8ee9-0ce7d6435b0b", "sighting_of_ref": "indicator--402ffc91-ac7f-492c-aeac-a6a2284cc307", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a76f4-e883-41e0-87b9-81b1adaf3821", "sighting_of_ref": "indicator--f118b95b-e42c-4013-91af-4f4423e6bf2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c2e967-90c9-4439-9194-e308a1e9fd1d", "sighting_of_ref": "indicator--040f3ffa-ec1b-4168-a2a6-098e160d01a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb652d3-06e4-4816-a556-bce3f0a9cec0", "sighting_of_ref": "indicator--2352156d-81d7-481a-877a-354aa043014b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d681e2c2-24ca-4c03-a4f2-bd45f4c2580f", "sighting_of_ref": "indicator--ccc47577-0b37-46d3-881e-7e54689cfca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa0afbd-5bfb-46ce-9087-950785e10d8e", "sighting_of_ref": "indicator--e39ec93a-928f-4f32-91e2-12b7ccdb8525", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504e21d3-1b85-4b43-804d-bef799becb79", "sighting_of_ref": "indicator--e01fe777-3350-42e1-98e2-946eacd57f08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e3a708-4d72-4a11-b4fd-71702d9d7d5a", "sighting_of_ref": "indicator--cefffe7b-4866-46cd-ac69-bfceb38b81d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aa635b-61c3-43e2-8172-43083759a91c", "sighting_of_ref": "indicator--7705462d-6543-4c19-a02c-ba2e5ad867a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1ec050-d7ee-4713-aeab-79361f50463b", "sighting_of_ref": "indicator--d43aa22f-bda0-4160-84f2-9c031e06dab4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f39b91-c3cf-4b1d-aba6-04d0d93726ae", "sighting_of_ref": "indicator--cf85b29b-d3cc-4a99-b590-dddf96220cc0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aa93a2-e707-49a3-b13a-c7560d78c352", "sighting_of_ref": "indicator--d77cf926-79af-4ef3-9544-22a711388ec4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec9e899-5359-4be7-9b99-b4285326a1fd", "sighting_of_ref": "indicator--ac572142-5b77-4da1-bffd-786a699d1689", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f5589c-1ce8-4e72-8f77-8aa78546d913", "sighting_of_ref": "indicator--1f605477-856b-4573-8b0e-987224a7a34c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c77892-2884-4bb1-bf78-a43686aa66a8", "sighting_of_ref": "indicator--98683706-bcbb-4d72-8a52-b034cbad30d4", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb20f7c-e54a-4768-b2ac-107d8835170c", "sighting_of_ref": "indicator--29b1114c-ac50-432c-bc81-04fbd01761d7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c7d6b-c050-4207-834c-645edf015ff6", "sighting_of_ref": "indicator--957dfc5a-fd1f-493d-8f47-f48bd9e1bd47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1545cc0-4d61-43fa-b6fd-db087fdcaa07", "sighting_of_ref": "indicator--860dbcfa-d830-4176-aa5b-da31db54423f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ed0689-24ce-4f7d-9b99-6dc2ac724bf2", "sighting_of_ref": "indicator--126b9608-be2c-4749-a2ab-39dbab7d98e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773529c4-6759-4c94-b730-f086ea681998", "sighting_of_ref": "indicator--7d0535c2-5646-47e0-bbf7-6d7898e3474c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bd114e-da14-4ee3-8c23-a7a7ea0b8fae", "sighting_of_ref": "indicator--aff10cef-a420-443f-8fac-e3e8a9e88a50", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dd44e6-127d-41c9-8b94-20188ab4f520", "sighting_of_ref": "indicator--c008e78f-ef37-4c48-9f0a-c2ccf0f70cc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a778c11-a4f3-44d9-a357-a7385c43bc62", "sighting_of_ref": "indicator--8e8d6a12-5e67-4f81-b3b0-48ba255102c2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a72f9b-1ccb-4ce6-badf-3b4b0d1668e1", "sighting_of_ref": "indicator--aff7d2d7-d0d3-4a22-8103-b7f9b86ac5fe", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6b1538-9192-4ec3-b647-0a815cce1821", "sighting_of_ref": "indicator--e48a4c84-e6c1-4b0d-9c00-b7216dc8c9b8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58116cc6-1bb4-46e4-8fbe-ae4b89a210d8", "sighting_of_ref": "indicator--27059b25-0807-447f-b3ac-a89a5c7335e3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b1fcf-4f66-44f6-b8c3-1cc910da31fb", "sighting_of_ref": "indicator--fbe5a33f-ad8b-489a-84bc-1f68e2daac69", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1d39dc-441f-4153-a4f8-6f7c2446856c", "sighting_of_ref": "indicator--6f9a39f7-7361-442d-bd70-7143eb0d4c80", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d9244e-1509-4d11-bbea-1faff018a475", "sighting_of_ref": "indicator--22be9fd7-bdaf-404e-978e-2d4ff710aa90", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad89953-33e4-48c4-b68c-61562527703f", "sighting_of_ref": "indicator--2001d030-068c-4580-8704-30e1ee9a1bfd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf015351-8100-4c76-8554-d0805e7b1cad", "sighting_of_ref": "indicator--d66d37df-db04-466d-8c9c-b0aaf71286ce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64e4679-8214-4e09-8d6f-f042ef464af8", "sighting_of_ref": "indicator--5d8b861e-25c5-4c7e-96e6-27ba637a282b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17db8021-03f2-4efe-8774-a996c08aa183", "sighting_of_ref": "indicator--38cd432b-ab42-48cb-86b3-aa3364b1c282", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ce3b7f-94a8-4d38-8ebc-f23c9a429c0e", "sighting_of_ref": "indicator--9a9ef49b-428f-41f8-b6aa-d1a8d5972602", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebf9f3a-f39d-4d85-a500-ca7792f0bb1c", "sighting_of_ref": "indicator--eb055b84-7d19-4729-99b2-ddb4f81657f5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4085f-98e4-42fc-ac71-092a4d65c4e9", "sighting_of_ref": "indicator--e9fe1a31-a1cb-48d9-b651-f82e8df4106e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ccdd6e-dc0f-48ee-b2e3-774f8f547301", "sighting_of_ref": "indicator--44ea70fe-3bfd-428d-86f7-768198c9cd16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da223b-cab6-4c78-aaee-16ff65e5d550", "sighting_of_ref": "indicator--6110103c-c3bf-421b-82c6-d9f54d704cea", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162359be-4cc0-45ca-97bc-f03cc39e05b9", "sighting_of_ref": "indicator--38eff30d-9ff6-43e9-8bb7-b6cff5fbcc27", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a20b5f-b704-42ea-abdf-7bfc921a6c42", "sighting_of_ref": "indicator--8e0745b1-0573-4c2d-829b-c08902b55664", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919894e6-4725-486b-ab6d-047cf999c6a0", "sighting_of_ref": "indicator--e2d322d6-ca4e-439e-8c23-8b41288f1b0c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd3e1bb-e31d-48a7-87ee-c8c3eb6e2a1d", "sighting_of_ref": "indicator--8bc44eae-5fa2-4ba7-b17d-9619c12cdac9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84b1add-1421-44b5-a92b-0fae33d785ee", "sighting_of_ref": "indicator--cbc6a018-ab32-480f-9d03-4a7880adf0e6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d72fda5-884f-44e2-9757-0f621c43c4a7", "sighting_of_ref": "indicator--1ca9284d-57a8-4072-8a9c-54b1e709e288", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde941dd-282e-499a-8db6-a64a9483aa9e", "sighting_of_ref": "indicator--405ad29f-a4c1-4898-a4ca-ab1602825151", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8909fb-cdda-45e5-83e7-3f419305c994", "sighting_of_ref": "indicator--42218267-a50c-4388-96f3-a8be4d10bd5d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636146f5-4917-4ecd-b272-5b702f226b91", "sighting_of_ref": "indicator--80ecaf29-2640-47d8-b95a-d0afe289351b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05c7056-22ee-4b0e-9ca3-53c699d5498a", "sighting_of_ref": "indicator--a6e588e4-d695-4017-944b-71b9da63b827", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d26c635-3f98-424c-abd7-a3144204cd61", "sighting_of_ref": "indicator--5cc674df-6303-4d04-a463-ab6b15397568", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa2602f-43ab-4db2-9698-b913cef245a9", "sighting_of_ref": "indicator--1c0f6196-dc3b-4df1-85fd-8d1c7fd00268", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6724fe-ce15-4105-ac6c-c5096bb0667e", "sighting_of_ref": "indicator--c6b7a2a2-26f3-4d58-a7b3-fa6d772669de", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243df8d5-6fd2-4a1d-9a96-7605f987a0fa", "sighting_of_ref": "indicator--e31e852c-ebce-437e-8280-8a4b13e4f6c6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdb0f8f-6e08-4c56-aff3-6197279f2522", "sighting_of_ref": "indicator--bbc5aa62-a5d5-462d-ab3f-4bf4fb44dc9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb58424-7ca0-4966-8b0e-f4015aae62fc", "sighting_of_ref": "indicator--a77c4e95-8ada-43e3-9c7a-23fbfb170c52", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0cd4b7-b0b7-4384-a298-2c0c605a22be", "sighting_of_ref": "indicator--b2825f42-29fd-466d-be86-a9b005c4b341", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc122595-c468-409f-9309-7b5c6e18fc01", "sighting_of_ref": "indicator--45e79723-ee8a-44e9-bd5d-5f4f0704d7da", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6166fa2-b10b-47ad-9a09-5cd5f7fd9efc", "sighting_of_ref": "indicator--e715c819-625c-4ed8-bb40-85df9ad7ab73", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed23bfa-ac0e-41ec-8e8a-85435bc6ddad", "sighting_of_ref": "indicator--18229aa4-e9e2-4506-82b0-09d440aa4fdc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374beef-6173-48ce-8966-1e6bc65682ea", "sighting_of_ref": "indicator--6e6036fe-8eba-4092-b4db-ae93a49e3c25", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba62899-9586-430a-b8b5-0bc237a34a51", "sighting_of_ref": "indicator--9f5483c2-1877-40b0-ba3e-5789b6d49c13", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e8c70d-327c-4b49-ac3d-ee6b69ca7a3a", "sighting_of_ref": "indicator--b49bfd19-d9a4-40bd-9b12-f7138fa1fbfd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be642372-d17b-4e3f-879f-4d7662e915f2", "sighting_of_ref": "indicator--d3c21e81-9b8e-4ecd-9c51-ceea7ce88496", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29887399-38f2-45f5-a921-0a14cf8d0def", "sighting_of_ref": "indicator--9b232761-4ee3-47fe-947b-50201a640f81", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ef91cf-8384-4ea4-a6ee-8594302dd1c9", "sighting_of_ref": "indicator--730e55e6-3a58-4b8c-9959-9fc12209c600", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a2319e-dd89-4ff0-967e-7ceb47f814b7", "sighting_of_ref": "indicator--67331e34-9229-404f-b611-92fc4997f3d0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70990fcd-4ad2-4806-9e0a-2101e3717600", "sighting_of_ref": "indicator--c1bf8c7e-b777-4bc4-8731-b5c043924be0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a483d5-1618-49ba-b20d-8b738ac33b49", "sighting_of_ref": "indicator--9c529c04-61f1-4995-a878-c9c3ff47529c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b65f4b8-6bf1-4ecf-97c4-7b39bc2c8229", "sighting_of_ref": "indicator--d6cca970-83c2-4cd8-90cb-9128f049ba8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c056e5ba-e986-4151-8b9f-d5b8adbc661a", "sighting_of_ref": "indicator--c74cd57a-f1fa-4304-84b8-f47240e12c1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c63d9c-e11a-4c97-857d-cbfbca734d25", "sighting_of_ref": "indicator--a2347034-c93f-46fd-baef-e6e659d6b1c9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda12d2-3bf9-4d79-90ca-375da1671aaf", "sighting_of_ref": "indicator--412cd9db-2ff7-49bd-9964-fbb61d54702c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efba1174-23fc-4f48-8fd2-f0361edb7aaf", "sighting_of_ref": "indicator--606a379b-3181-4deb-b6f4-9e2bcd0120ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0c6d79-0a83-4330-b9e3-2fe3104d1acd", "sighting_of_ref": "indicator--d7459d6c-d57c-4cdf-8d46-e612355cda9d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5eec9f3-5cdf-429c-afad-7f5eaa6f80d9", "sighting_of_ref": "indicator--5525d7bd-fff0-467f-a332-314d954ddaad", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234c2553-5ed0-41cb-98a4-43ce7bc1fca1", "sighting_of_ref": "indicator--1302f362-4c8f-4c81-8805-3d0d9f0c625a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c3f69a-3968-4fd8-95d6-fa600d6cff53", "sighting_of_ref": "indicator--c66393f0-536d-4166-b50d-0e3befc20567", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c246ee5-37fd-49ab-8dcc-27b2e6bdbecf", "sighting_of_ref": "indicator--fcd700e7-e886-4dbe-b800-39c5ff55a67e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb184ba-685d-48c0-b007-bc2ba9b22ab5", "sighting_of_ref": "indicator--5e52dc50-9737-47c2-91da-078619917a02", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0f782a-0a8a-44f2-8236-74ae2a5efed2", "sighting_of_ref": "indicator--7800fa6d-68d7-460b-b71c-58f43922b470", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d3c765-4e3b-44a8-83b7-21674df56cbe", "sighting_of_ref": "indicator--0b9e7676-92d3-4025-8ade-dcd9b9115312", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e0fec4-86e7-48ba-b255-8556f3ee9ff1", "sighting_of_ref": "indicator--4c5e96fc-5ee2-4d46-99a8-32e8435c079e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cff73d-5be3-49c5-ac88-3ce7a607cedb", "sighting_of_ref": "indicator--378bf1a7-2ea3-45be-b845-c97a0c307e7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd11e63-34a5-4524-a594-dd3a2cbee417", "sighting_of_ref": "indicator--3c854b06-7585-449f-93e4-c2f597b1b8a1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5814fa34-6fd1-431f-a0a0-086fe0330b3a", "sighting_of_ref": "indicator--d7191e7c-9461-4499-98cc-b8ef066a019f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c15f40-dbc4-4d96-b47f-a4fa26164bd2", "sighting_of_ref": "indicator--dde81b2f-2d9c-479c-883e-557c82ef08b5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c772f7-708a-4c23-bfe9-b161b5f88a0c", "sighting_of_ref": "indicator--4a69025f-3177-4421-8d7b-96821d12ab77", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801fbec7-abb3-424b-969f-3b337186290c", "sighting_of_ref": "indicator--245cb1d1-bdfa-4118-adb3-e828f5275e98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f6d9b7-2123-41aa-8173-5e670a075645", "sighting_of_ref": "indicator--f61eb10a-70b4-421f-8f6b-7753d630f22d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaf12d2-d9f3-4a8e-bf4b-c08b514579b4", "sighting_of_ref": "indicator--29aa4b55-1fab-4230-94f6-3ec957471318", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5918ca46-2cc3-42cb-b6b2-6265b493343a", "sighting_of_ref": "indicator--7fd638ef-cc81-4d97-ab04-0a5ec0b1b725", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234815da-a72e-46c1-b752-c565cdd66fb9", "sighting_of_ref": "indicator--082b487c-c060-482e-8d03-af57c789c20c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96c7a89-1a94-4c8b-8bd2-16e584d008d0", "sighting_of_ref": "indicator--c15f44cf-f515-45f3-92f0-602a01b26eed", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec20dbd1-b793-4bc9-b1d1-aebb3090b965", "sighting_of_ref": "indicator--451e4dd0-7646-4364-ab59-3eb6094f5814", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b268525-b607-4eec-9596-ef97de7a29b9", "sighting_of_ref": "indicator--c4a368e9-8a45-4813-a0bb-922b68db09e9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00230353-3f9b-4169-a2a2-c4b36fcdc7f3", "sighting_of_ref": "indicator--66e63844-671f-4da6-8279-07e3db10d70e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43881282-f3a1-4511-a300-285702bfadb7", "sighting_of_ref": "indicator--204cc947-e3ce-4819-b29a-b254bf287a2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1cb225-20c6-4b5d-9d9a-7633e94beb04", "sighting_of_ref": "indicator--16ec4f92-4a2c-4aa2-8118-fcbdf9bd66c7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76fd58d-854d-4619-aaee-d906ccb6460d", "sighting_of_ref": "indicator--8af22049-7afb-4b71-972d-8fa8a268a94a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81259fa-4cf6-4a7b-bd63-4dbd4b23914f", "sighting_of_ref": "indicator--43eec03b-70e0-423e-93f4-4ee6dd11db30", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8541bd11-6a0e-460b-9dc8-8cb26313e27a", "sighting_of_ref": "indicator--348ab836-2766-4203-8cec-c0ff543c11f1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a706eae-02aa-401c-a0a3-43757063c30f", "sighting_of_ref": "indicator--42a7c6e0-9f93-4711-a636-77a9b8eca285", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26556240-f858-479f-a6b2-2feb4cc19339", "sighting_of_ref": "indicator--e2e044a0-3368-4fdf-ac65-175e0795c0e1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5c1d47-1216-434d-943d-f6b80a1a2def", "sighting_of_ref": "indicator--ef633f93-5ced-4b96-9393-d7589e5ffd47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b528c97b-6c6b-41b4-88a5-9c57ddda1773", "sighting_of_ref": "indicator--eacfb623-9b9e-412b-b609-6af609355d98", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2558e790-3a6e-4976-a488-a42905954f63", "sighting_of_ref": "indicator--a1c36ff6-035b-477f-b3e2-e285b0adc62e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466f807c-c97d-4b28-970e-8e10167abe30", "sighting_of_ref": "indicator--c5c2f0b0-deea-462e-a1dd-14af8e93939c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad9e940-4174-410a-82db-e904a1597748", "sighting_of_ref": "indicator--84747c7c-a1f7-4c9a-8575-80ee6500ee9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7021ee22-0aa6-4f6a-8c5a-0a736bf464ad", "sighting_of_ref": "indicator--280a6076-da20-4b58-8970-3e8f201b6082", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bacc175-a5f6-4be5-8d83-c3b0a588d9cd", "sighting_of_ref": "indicator--c0731870-07af-414d-a9bf-115538c8c40b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468e9b55-9509-4110-a124-4b647a39fe27", "sighting_of_ref": "indicator--e0d26453-2191-46e9-9afc-fb7b440968cc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c339422-06f1-4213-a136-f6481769d1f7", "sighting_of_ref": "indicator--b46d7613-d045-40ed-be05-0095fbb690e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e4b030-f6cd-4533-af6a-38c4307ccf2f", "sighting_of_ref": "indicator--2001de18-bacc-4ebb-8b48-11e6d076482e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ba8189-2dcd-45b7-9944-a0b4c8bae76c", "sighting_of_ref": "indicator--2bc6f800-6ce4-49d5-bb53-14f9aff253b1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e9d3bf-a86e-4bbe-ae7b-4d8070cb4415", "sighting_of_ref": "indicator--391ae02f-1b24-469f-821b-90a411030a9e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff78b72e-9f69-4aa1-986e-e1891052e9d3", "sighting_of_ref": "indicator--8f5f3664-ed22-42b0-87ac-41a10a1d7c15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f773ce1b-0730-4472-8391-fd79273d0f3a", "sighting_of_ref": "indicator--9904d31d-1034-4e7b-a12f-d5d466589d7e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f3bfa3-d579-4129-9acb-0fc150db94aa", "sighting_of_ref": "indicator--32069e27-5c4c-4b27-ad85-b7d45f10835b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a7eba4-0a2c-4118-b35c-210e35f18a66", "sighting_of_ref": "indicator--d2f4e434-2204-4832-8e6b-6fd4b2dfe77e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c775a9-1798-46df-99d8-b14accd25275", "sighting_of_ref": "indicator--c910c59f-b8b7-469a-b5c5-87eff822d87c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de36a6-1caa-4f4e-83a8-9656ef6cff74", "sighting_of_ref": "indicator--39dde394-a330-4720-9d56-96cc1587a938", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d7ab93-64ba-4824-a4c9-d0b9c60febe7", "sighting_of_ref": "indicator--07e22c9a-5904-48e7-a28d-5fe00328ed8e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7544d1-4f33-4ba9-addc-f239a9d044ac", "sighting_of_ref": "indicator--1f96771b-cbfa-4913-bc95-6c0bd9bc9b0f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fce8074-fbb4-42ff-a23c-2725e35ad8da", "sighting_of_ref": "indicator--71577f86-4e27-4172-8e0c-2ed4a4fbf810", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ff5077-2023-431f-984f-e4d22f974481", "sighting_of_ref": "indicator--9af899aa-9794-4ce0-94f0-8eb3533e18c1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db94b703-5662-4f87-89ef-8f0509eead54", "sighting_of_ref": "indicator--6097cdf5-18a0-494b-973b-f8f221631334", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0efbae4-17c7-4e47-8fd7-938a343f5e1f", "sighting_of_ref": "indicator--32533ba6-902f-4d95-a8a5-44be01136611", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c6558e-2fde-41a1-acde-7248d6461972", "sighting_of_ref": "indicator--a346b920-604a-4352-9c9b-49f8ff0714e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5ad3d8-7090-49fc-b217-1e119c1bc097", "sighting_of_ref": "indicator--a38b205f-e842-41a0-83ba-86ba98951824", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d3c260-6e9b-408c-af3a-bc85b393d2d0", "sighting_of_ref": "indicator--6073ffc5-c4e9-45a9-9375-43dd60179e47", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c68baf5-ad5f-491e-bd2a-a7a36270500c", "sighting_of_ref": "indicator--835c8e4d-dbb0-4e98-91da-1f87ae29884b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543d1e58-4534-412a-8713-c614d35b4f5f", "sighting_of_ref": "indicator--1dbceba8-e6fd-4c89-9676-52724e9d413c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a42e6d7-4099-4188-aecd-e978473c24cb", "sighting_of_ref": "indicator--8eaf6df2-bb6b-4fc5-96a3-09d2bb9be247", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc1f1d6-fbe4-4b7c-97e9-40ba20373aa0", "sighting_of_ref": "indicator--34700bbc-a869-4052-842e-aff89220a794", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14967ad8-1854-4a1b-9808-e239c2ae29e6", "sighting_of_ref": "indicator--1965144b-c200-488c-90f9-635f399bdb66", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06251d29-a1c9-4960-900f-e49d0f256e7f", "sighting_of_ref": "indicator--0d81dc55-dddc-461e-947c-84377831a120", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2106f253-6d24-4ca6-87ad-215e1f21beb8", "sighting_of_ref": "indicator--3afdba03-d501-4b9d-905b-baa76542dd94", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ce6f27-457f-4102-a42f-0fc7cb7a293d", "sighting_of_ref": "indicator--90b5fc64-4597-436d-a740-04b05caed724", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8537e36-6212-45ee-8eec-a910f6091366", "sighting_of_ref": "indicator--ac4a8d01-9d8e-42bc-acf2-940b54b1d3a5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a621e82a-d4c1-47c1-8269-04cac853915d", "sighting_of_ref": "indicator--b44fff20-09aa-4fd6-a81e-dbfe265dbb28", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85811715-663d-43e1-b03c-5fb4fb636e80", "sighting_of_ref": "indicator--db16c4a4-c347-4d23-a46e-61f0ca717d63", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d303915-572d-4cf8-b66f-3363e26e5ff4", "sighting_of_ref": "indicator--ba48abde-3737-4f51-8916-ef5c548cf778", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127cfe14-3e2c-4071-ac43-47d1b56634e1", "sighting_of_ref": "indicator--102e72dd-2093-4c4a-bff4-c3fee45b5a16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec28efb0-d6ff-425d-a940-cbd2033fc2bd", "sighting_of_ref": "indicator--1af5880b-7ab9-4610-b59e-f4469d29eee8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1c310-dd0a-4ec0-a78a-272b38c977c5", "sighting_of_ref": "indicator--dc5a78fd-e482-4c85-84c2-fdfff4f0354b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f17ecaf-4c38-42f5-b483-dd0bd192fe56", "sighting_of_ref": "indicator--f0b5d41a-d579-4e98-a4e4-139a80aef225", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13818698-407c-4eb4-8b77-8eb92f7e14e0", "sighting_of_ref": "indicator--5f083237-d630-4e87-8194-6c469be8df38", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34300e04-8077-440a-b156-2f5ea9cce38d", "sighting_of_ref": "indicator--d6aa26ef-dc7d-4896-94aa-441188bd2169", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be2217-8059-472f-85a2-df00623a844c", "sighting_of_ref": "indicator--f0c6978d-c1ce-4719-aeae-7b667d436d16", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc47535-90f0-4289-80db-87f73e4d3180", "sighting_of_ref": "indicator--8e4fdf8f-c1cd-45a1-9d29-e0ae38dc4da5", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169970b8-e6ed-4179-b75b-43befa2fdec1", "sighting_of_ref": "indicator--9788e922-8e3c-4c2d-84ec-842ab8be961a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f126c9f5-4dd3-46c7-b3bf-4b49f4d297a1", "sighting_of_ref": "indicator--d571616a-42c9-4c1c-bb85-fa7b72bd723d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906158a6-db71-4975-b048-884a5bda115c", "sighting_of_ref": "indicator--7edb6c6f-39d4-4d68-b9c0-5306ab049f3b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed23d895-e95d-48f5-a60f-bc7560f6c196", "sighting_of_ref": "indicator--1ac7cb66-0fca-44b5-a609-87bbe7872392", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f5f845-4ef1-487c-b8e6-743653ad6057", "sighting_of_ref": "indicator--b989c798-fe34-437f-84c6-a5e0ff448b6c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eca19f3-17a6-4f11-95e9-6bad4d4094c1", "sighting_of_ref": "indicator--eaf8688c-84d4-4a30-b7ca-1306e806f92f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129e5223-1a2f-4c36-8573-73e25a5b9008", "sighting_of_ref": "indicator--7bdb5ab0-2825-4e47-bfce-b52fbc35c1ac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17c4b7d-e416-4826-97dd-f9e0eacaefd2", "sighting_of_ref": "indicator--324beea7-be7e-4317-a6ea-bc52786afb2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63592fea-5e08-4926-818d-cfebc77f3b11", "sighting_of_ref": "indicator--07c506f0-8b5e-4052-ad5a-7e5591e0caa3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d3fafa-c338-449d-8962-1fcee111796c", "sighting_of_ref": "indicator--944ad847-5ada-42c7-9ccb-d4786d604c1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d570d655-f730-4459-a965-54ed44925dd8", "sighting_of_ref": "indicator--fb8bbd34-f7cf-4cfb-88fb-c5a5d15341db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e23aadd-6fc1-4ec0-8b8b-1414a1f9918f", "sighting_of_ref": "indicator--aea76ee2-16f1-47b2-9267-f8287b2354db", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d14cce4-4548-4fc7-9788-76536e5a2272", "sighting_of_ref": "indicator--f9025112-c8b3-439a-a661-2224a8c57577", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3435a35b-7214-4865-83d4-11f0b58bb08c", "sighting_of_ref": "indicator--a88b9e38-0bf8-498d-82a0-3b662b591741", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72f8e57-94f8-4a63-9359-deffe57b5995", "sighting_of_ref": "indicator--8e8a133c-1783-42b3-b50e-673e9a2879ba", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a527d41-2d6e-47bb-af32-4c616b42d172", "sighting_of_ref": "indicator--8549dba4-a7e3-4153-816e-e4c0110057cb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf42bcde-308e-4a97-b6c6-f92e616177c9", "sighting_of_ref": "indicator--746621dc-8441-40aa-a5f5-86ab95bfafc3", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68432f36-6e1e-400c-8487-40181161bc7a", "sighting_of_ref": "indicator--a0809ad7-073b-407f-b48b-9910054fe009", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bfad57-d1c1-423e-a103-415ef4e383c7", "sighting_of_ref": "indicator--cad4e8b9-bb88-458e-9864-fd73ea90ee39", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d087436d-604e-43d7-a5d0-8924efe31342", "sighting_of_ref": "indicator--898c52ba-568c-4416-925d-088099f92dee", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9c886e-1238-4e3e-af4b-dae72a23e72a", "sighting_of_ref": "indicator--70118dc7-4ab0-4271-b540-dee8da9f492d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5933d-c971-4d5d-8362-5c761e2845c4", "sighting_of_ref": "indicator--b0aa2cc5-5ade-4fb6-8964-22d9caa4b631", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ad36d9-0c24-4eaf-af68-71f6ebc6b9c2", "sighting_of_ref": "indicator--c7c78942-2178-47dd-946f-d9f305308ad2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f835cc-80cd-4452-aa69-5f99c313d202", "sighting_of_ref": "indicator--a8476c2e-616a-4bdd-9c02-ec284da07ec7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730b38a0-e3c5-4876-9a1d-ba947e399aa8", "sighting_of_ref": "indicator--ef1b0759-1437-48f0-adf9-bf8946fc5cca", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7996a3-7a7d-4184-a4e8-1c2e87b999ba", "sighting_of_ref": "indicator--19b5a190-dedb-409a-8e99-07ec83eea195", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e88833-6341-4688-876d-63645c6eb31b", "sighting_of_ref": "indicator--80d1580b-e777-494d-978a-75df03565b9b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624d3171-7a4f-4ff7-9be3-9bd8c54d8aa2", "sighting_of_ref": "indicator--132cc56e-1aa2-450e-af59-35355c96448e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2452f498-4209-4eee-982f-2fdf15932c94", "sighting_of_ref": "indicator--1fa8a66a-ec95-4397-a3fc-c65c34e543b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d11f4cf-3c5b-440a-b3d2-e54a5b2bfc77", "sighting_of_ref": "indicator--45844250-f13d-43fa-b52b-d8cf15151f7c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb5c3cd-22da-43ba-84a1-f218e146d3e0", "sighting_of_ref": "indicator--2d9e32f1-a2e7-49d6-92da-24eec02489df", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91c7875-4076-4af7-a85e-b4392d4faea5", "sighting_of_ref": "indicator--c2e4e647-df97-4f61-a5c0-43f593eb675e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeebf2a-5016-43c1-b94e-59be4fc08bc4", "sighting_of_ref": "indicator--40b0813a-d3d7-4bd3-b81b-e66f5c9eaa05", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc25536-f0a6-48cd-8b07-40ff22f5877c", "sighting_of_ref": "indicator--cee86991-8bb8-4833-85da-229e5e253655", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e918a3c-8f2d-4035-9006-cfd501e92267", "sighting_of_ref": "indicator--ee4e0d2f-0cb0-4c12-9666-75af0bdb479f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae00cc7-6dc1-4b40-a767-94eb4e157b44", "sighting_of_ref": "indicator--f7957782-86b5-4f0e-a079-6c3a2e82d1d6", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57d8b37-6007-45b5-a686-5092647c91c2", "sighting_of_ref": "indicator--474cf0f8-2116-4f62-9a78-a58c609fcc1c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b6be09-dd54-4074-bab6-ebc222633e7c", "sighting_of_ref": "indicator--a959d9df-370e-4e49-aca0-14e286a15cc7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b45807d-5c67-4fb5-bb19-03fb6a9e56d2", "sighting_of_ref": "indicator--b9e3f32f-cab1-4265-9e01-6a625a6eb637", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f2124f-aa80-4142-824a-f2a93555936c", "sighting_of_ref": "indicator--ee36513c-28ea-436f-b99e-c710e6c17cc0", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6ec381-132f-4656-b840-41f7c0f125f0", "sighting_of_ref": "indicator--a26a7421-bd48-4761-a91f-911cef44b512", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdc24c4-b257-4e10-93ef-a5b60ec0f56a", "sighting_of_ref": "indicator--a643d849-02e5-4066-89dd-b6a26d5d95e2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d743d176-20d6-4f2f-b17c-a48a081aac1b", "sighting_of_ref": "indicator--5fff0b7b-524c-45fd-938c-8c90a5cede15", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d6e614-cffb-4aff-86aa-879ed88878a4", "sighting_of_ref": "indicator--ed3d993b-b83c-41a2-95cf-f493e786664e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf879ab3-46fd-4fd4-9783-d39766c5e155", "sighting_of_ref": "indicator--4347f7c6-8c58-4902-88de-6b529021b7cc", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c7ace6-6618-4b3f-bbf1-342c73446bf8", "sighting_of_ref": "indicator--f7a7433d-ab6a-4ff4-aedf-ca1ef9fec664", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72ea552-fb55-4491-811a-c76b8858abb5", "sighting_of_ref": "indicator--0134feed-32bc-40fd-8869-72607b00099b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6461edca-c4d9-4c70-b0e8-4013e2e7f9bc", "sighting_of_ref": "indicator--e0564f31-9bc4-4b2c-85ca-db47a8a3f5b7", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca59488a-1be4-4606-83f0-7610dbe54430", "sighting_of_ref": "indicator--87d3ca66-d056-49e9-9b50-3e24cbcb798a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81be6163-6fd8-4bdb-943f-80a6ef855576", "sighting_of_ref": "indicator--31af03d5-8534-4153-8701-1420c82d0318", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d973a88-3b3f-4f57-896d-096b9b8c255e", "sighting_of_ref": "indicator--a7199cc2-ec77-4ab4-8c3c-5272a8a4c254", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcac29c-0b4e-42b9-a95a-b7d97b7ce3a8", "sighting_of_ref": "indicator--056296a7-c99b-4aa9-bc1b-3effc3c9cbce", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e3b1a-7d26-4146-a2e5-b92ee4ddc1a0", "sighting_of_ref": "indicator--79980f49-3b61-4043-9e98-6ac0c14932d9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c6af28-4a8f-4fc6-8e1f-2fd352120716", "sighting_of_ref": "indicator--46f66fc7-5179-4b9f-b470-323e9c496ebf", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aece1b-55d1-411e-b2c1-c258a04f5b2a", "sighting_of_ref": "indicator--bb09043c-cc19-4e1c-a473-7ceb4e8810e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6377464-19cb-4bc3-a351-5fe4fccb6363", "sighting_of_ref": "indicator--8b4f8448-ac0c-4669-a77c-6571e42456e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f420f90f-479c-4a2b-a774-9848dc9f2bc0", "sighting_of_ref": "indicator--7b4c01bd-6ca4-488d-8614-3d26736be471", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8e08b0-74d7-45fc-952f-f963c418b49c", "sighting_of_ref": "indicator--c38068f0-3831-4c75-a2b9-65b3107d3b53", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687d99a4-d4e7-4015-9e14-7f276e98924d", "sighting_of_ref": "indicator--ff8ece09-32bf-447c-98b6-d1eaa6613b7b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac356a7-25bc-497e-9c08-13d0689c91d8", "sighting_of_ref": "indicator--9b25ac27-4d94-4d92-b52f-ad21afa7e50e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334b34f5-815b-4ad2-a2ca-b15c2c29bd95", "sighting_of_ref": "indicator--149e9269-afc2-4404-afc7-e95ba9825afa", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcdab5c-cdd3-4f8b-8d98-237446b4eb4e", "sighting_of_ref": "indicator--d222dc18-562f-4aad-8052-e906bbb4c4ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c561b651-a194-43f1-a59c-995324330aa4", "sighting_of_ref": "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "where_sighted_refs": ["location--3908c942-c269-4fb7-bdda-ad61f60c9674"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8e7215-748d-44dc-a2fa-1f11c8026551", "sighting_of_ref": "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4179091-aedf-4590-a0ec-46e0ad9789aa", "sighting_of_ref": "indicator--4d86a3d6-e504-4f0f-b533-4ed11d30511b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68be1301-5038-4971-a43e-6b525c8410b1", "sighting_of_ref": "indicator--db949138-8dd7-49cc-bb70-f21711a1f2ab", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c2b468-9633-4471-ac51-b2c2bef57057", "sighting_of_ref": "indicator--00e1de3c-deac-44e5-a054-0c52aebce05f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a920dbf-8165-4490-a2e9-28dcef95c31e", "sighting_of_ref": "indicator--26f5cec1-7718-4f45-9db7-f64a99367cac", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c698664f-332b-4367-91ee-5b122d602a83", "sighting_of_ref": "indicator--3ff394de-9c76-45ac-8827-9627b010101b", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc6c672-f921-4001-994e-188a148abd70", "sighting_of_ref": "indicator--e58ab89a-236c-4f12-9064-b498ffe6ed04", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daf6243-347b-402f-a45e-d1570970a7aa", "sighting_of_ref": "indicator--a57b78cc-da07-4c1a-b678-1746c43fee2c", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b859c8-c161-444a-9edb-4201fead75e3", "sighting_of_ref": "indicator--3029aebc-0949-4114-b639-23def8fa1083", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb562e17-ac5a-4254-89c5-6c49b7c0f25c", "sighting_of_ref": "indicator--3029aebc-0949-4114-b639-23def8fa1083", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0ecf08-d3fe-4aad-97b8-0ee687e14830", "sighting_of_ref": "indicator--e056c613-4000-4c40-b34d-9ae5ffa134ec", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafd2109-33e3-4add-bc87-ecdf3c93db85", "sighting_of_ref": "indicator--1be07791-5fb5-4e41-abc9-83d45258f50a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9903673-2e57-472e-81e3-7834a7677f8c", "sighting_of_ref": "indicator--e4825f10-3eea-40b6-abd6-8a65746f0747", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90df8829-c298-4b5a-bfed-20912d255c4a", "sighting_of_ref": "indicator--dbbdc3e4-bdfc-4534-9cc7-f0958a250856", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090b1648-572d-4e03-9aeb-5d30c776a74e", "sighting_of_ref": "indicator--cc7388f1-3839-4fd2-bb02-cfea131c91d1", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22c76e8-9ce3-474c-8761-404f8692f991", "sighting_of_ref": "indicator--39a9f6d8-14db-4826-a594-b2d2718e2083", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bc9140-e574-4704-be59-ebea4afcb9a8", "sighting_of_ref": "indicator--d104e3bd-a4a9-474f-9677-683ef7cece1e", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2eed2a-d4ea-46f4-93b2-adb94e773843", "sighting_of_ref": "indicator--5ed2e7b8-142c-444e-9dc7-b7814136600d", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3b6947-a61f-4837-99e1-e6be6b36b423", "sighting_of_ref": "indicator--ba4734d0-c73f-482d-af3d-09730823eb48", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809efe85-9bd9-4031-b58a-858794094b8e", "sighting_of_ref": "indicator--5c1097ec-a8f2-47c0-a4b9-6d10a868f2eb", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52953b9d-0a69-49cf-9315-d2f1982443d8", "sighting_of_ref": "indicator--0994b21a-1092-46b6-9b69-a857999642e8", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b4ef5b-675d-4e74-a113-14eb48452faf", "sighting_of_ref": "indicator--84f62f30-3f4c-482e-b132-eedbfdbadb21", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fb93da-a495-4c6b-8e41-9fe280a59016", "sighting_of_ref": "indicator--40f485b8-0a7d-4737-a3f3-09d31154e9dc", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7927270-9084-4fcf-957f-4361aec68315", "sighting_of_ref": "indicator--a50195bd-5bf8-4082-90cb-974417e116b2", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2200e18d-3464-483f-9c6e-ba655b397752", "sighting_of_ref": "indicator--0ed51382-e161-4df4-9c3a-fefb6d11e60a", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f03d5c-934d-4acb-9f8b-dc1f1f76d5cf", "sighting_of_ref": "indicator--13e7bf7c-4a13-4458-ba4c-556160fa7255", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f67e1aa-3bfd-4b87-91df-43cea5e121c3", "sighting_of_ref": "indicator--ee5fb0ca-8af1-4556-b1d6-7012b757090b", "where_sighted_refs": ["location--7e56dfc9-456b-44d1-8112-0381074b68cb"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9095db-7329-4cb2-bcfb-7079cd82477c", "sighting_of_ref": "indicator--71a54de5-53c0-4200-bceb-3022d5d6ba6f", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fa5a94-ab50-450b-9e0f-3810becc6c23", "sighting_of_ref": "indicator--aab4ebcd-9446-41c7-a009-8c8ade91cb67", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e53ecb6-9263-48d1-aa54-bd02e60b8602", "sighting_of_ref": "indicator--42adef61-0327-4517-88e3-ff6de17757dd", "where_sighted_refs": ["location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351"], "first_seen": "2026-10-03T00:00:00.000Z", "last_seen": "2026-10-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--fe7ea74e-04a3-4015-a6cc-eae7b2f7956d", "name": "Threat Report for 2026-10-03", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-10-04T11:00:01.343Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--7e56dfc9-456b-44d1-8112-0381074b68cb", "location--3908c942-c269-4fb7-bdda-ad61f60c9674", "location--92a7f97d-4168-40e4-bbb3-6a8ef0d96351", "infrastructure--9f4f527e-1c64-4e09-b081-cbc16e97158d", "infrastructure--eaef19eb-818d-4d14-aaa8-db98c1dc785c", "relationship--6a995f6e-a8d9-4e9f-a900-0c6f57bebbef", "infrastructure--fe84e560-f8a4-4344-aa2d-28c7bd6906ae", "infrastructure--e06f61da-273d-4449-8ef5-7c64975dccea", "relationship--99a28e82-5b54-4405-aadd-dbd8d66fe162", "infrastructure--46062c93-0ca5-4245-8d19-6723243f4edc", "relationship--41ec1b6b-5a50-42d6-84ea-39f7402b5681", "vulnerability--42bf40cc-b66b-460f-9d62-eadd9cde20d8", "vulnerability--7921c914-0158-4e63-aa45-1648c80f9736", "vulnerability--541593fb-6310-45ca-91b1-f43b3c9919d3", "vulnerability--3f194e41-a7d4-440c-acf8-848baf6a2def", "vulnerability--e3ed0e0f-9b12-4a57-a12a-912dc1197970", "vulnerability--beb37bb1-2149-46a0-97d5-aac1bfae6f50", "vulnerability--1f00ec26-cfa8-4d14-9152-f57fd69e6aaa", "vulnerability--caf40b3f-7876-4088-9cdf-8276a0901407", "vulnerability--5ac02e58-af14-4a17-8bb7-f2df093f2933", "attack-pattern--b87b7962-f122-4a2f-87fd-07e379d79993", "attack-pattern--2ffc85fa-0cd6-4fd6-9c4a-e996c49ea16f", "attack-pattern--89f99014-2ff1-40ea-a2ac-cf67e4bbbf01", "attack-pattern--23ac1648-cf4f-48d9-9def-23a6bf098b3e", "indicator--c346d634-2f8a-4762-b9d8-4451a77e4509", "indicator--e12cecd8-19b6-48b3-8059-5a821463e738", "indicator--a960d38e-62bf-4a8e-ae87-f3abcd5e7f3c", "indicator--e9ec7e43-d6d8-48e1-b254-b6f64b29859b", "indicator--9efc8ae9-c587-4421-a213-5391d7ad01de", "indicator--93f3348c-fb0b-4363-ae37-6e60fc0ac3fb", "indicator--0b7a6de7-807e-476a-8107-4e9cbc656838", "indicator--d714208e-5439-433b-8be5-3248168bf51e", "indicator--e68bfcdd-9232-40d5-9841-57fbf26ac1c3", "indicator--1b1c422d-5540-45df-b81c-186cfb6b58ec", "indicator--956e1edd-ef3f-4d45-a711-357f6a5fce54", "indicator--67a578e6-9037-4aa1-bfd7-888db92e3c78", "indicator--6ae5f6c5-7c0d-4778-9c59-ee0a70f3c558", "indicator--6772f783-60f2-44db-b993-e462299ec6fa", "indicator--3fbee18a-8b71-48d9-b7f5-57758501717a", "indicator--2e9f6192-d5e9-40fc-816a-b9d4e75dd923", "indicator--084bf69c-5174-4ff7-895c-f5853be4380e", "indicator--849e8285-ec89-41c3-9c8f-da1ed0da1ad4", "indicator--d59bb1ac-ad87-49d8-9335-f4303cdcdfff", "indicator--f789c852-fad9-469e-bce0-ff53fea846d6", "indicator--79df0e49-55a4-4613-9775-e8fe6651b1b9", "indicator--35aac28d-0806-41cd-8073-bea399ba225b", "indicator--e243447d-2c69-42bd-9337-4187f12b634f", "indicator--747c9c8c-b022-48fc-9507-0649fb39e0ee", "indicator--9b85cb8a-df21-41aa-a7db-3a945e6cd9a9", "indicator--13ee2d65-b501-4851-a316-502b9e6f61f5", "indicator--4ec28467-c8be-4749-a220-d4ec5c5b7235", "indicator--b3fb6d73-b26f-49cf-8422-964e36a0e349", "indicator--4e0b3000-e8d0-4559-b013-2d369bfb8684", "indicator--e256e7d1-b61e-49bf-bf52-89505defecaf", "indicator--d08122e8-103a-4fc4-b794-f7939f6777a7", "indicator--9e231eab-afda-42f3-b612-7e7c90024cde", "indicator--c86d4b61-70bb-4c8d-bcee-1d5dae07cfcc", "indicator--831513d7-ddac-4afe-8ae2-55fc21e92728", "indicator--179178d4-b98e-4345-ab19-b5e23efc8c49", "indicator--c1d1881d-d0cb-4e35-b6db-7b17a1ed57e0", "indicator--8dcf750e-d44b-4012-b659-25af524248fa", "indicator--30f85c9e-450e-41f1-bea5-658bc789b6cc", "indicator--721600a7-ea48-44d6-859b-4247db6c5a57", "indicator--f2d61111-3206-46b0-9f41-180260b9f103", "indicator--6d96c2bd-e42f-45ad-be6e-7730742739c8", "indicator--6fb825e3-3921-45e9-b01b-7c50a1b004db", "indicator--326d0962-5850-41af-a495-f0d31daf992f", "indicator--245c82ef-88c5-47e8-ad77-36d9a5fb320a", "indicator--04f3d678-df2e-4629-a1c0-209fdc56c082", "indicator--cad649e1-9489-4738-a9d9-cefaa3879bc9", "indicator--8f3a0739-72c8-4db2-915a-b2a517558eb5", "indicator--f6607d29-a561-44af-9142-f6ad6f329f90", "indicator--4716c5a8-8ef7-451c-ae0f-f67fa0160e4e", "indicator--c1e5e0db-03f0-4f52-9e48-00efc8fcd105", "indicator--a91a2c2b-e360-4789-bacf-3d95e4922410", "indicator--aca7624b-136b-432a-a44f-f2afff004368", "indicator--5ed94f6b-4cbc-4725-87fb-3aab1c577c49", "indicator--83dcf4d6-d5f6-45fc-aba0-08e7e62dc582", "indicator--f0bfd5dd-1069-468b-a607-ab0822ad4ca3", "indicator--7050903f-b57b-423c-bb87-6b3d52cf6a1a", "indicator--ee27222f-e389-4ed3-aedb-67591229ab84", "indicator--1812ed85-1f81-49ea-961f-4ba2fe5a6c89", "indicator--8330642b-4517-4a3e-937e-3a292d4a6d15", "indicator--ce281aad-74c1-48ad-ae56-26c07eaef073", "indicator--8a5bcaa3-dc4a-4fda-bcb5-71d501103f5b", "indicator--0c4e84b3-cb8f-46cb-9ada-170b1eaa39f7", "indicator--e65e003d-98e6-4a3d-9c69-2c2ef93e7321", "indicator--4a6df0ef-42ab-47a3-afee-999b69e52799", "indicator--c47c9fea-09b3-40d5-878f-60b3c2b81681", "indicator--c4eb07c0-e1dd-4637-af0e-382dd4e7dc3f", "indicator--c78e8d82-85c4-4d35-8c5f-fa45bed2cd28", "indicator--d4ffe17d-f113-4268-8c4b-f233b3472810", "indicator--bc54da3a-44ee-4214-bee8-0e9d1438f804", "indicator--62e90333-aeeb-44bd-81f9-5d7a4bc01334", "indicator--315ced7c-cd4c-45b9-87bb-4ee9379f528f", "indicator--d134bc69-3693-406f-8b50-4038880699bf", "indicator--cc1d4441-59c6-4c07-b482-aadbf6be9e87", "indicator--5539f97f-0226-4c08-9cb2-38fd6914c974", "indicator--d7822e8b-cbe1-4ef4-a78e-1e5ba7b03088", "indicator--a3bc6ec3-286f-4e22-bdfd-4de2df089a97", "indicator--6280d8b5-45e8-4632-8c36-0355f0113883", "indicator--208bb677-69a3-4103-b3f9-0ea49151651f", "indicator--010881ca-2425-49f3-a21c-9a2324c57177", "indicator--2be5c3d0-ff8f-4c2e-8742-d726aaa08854", "indicator--9d878634-a806-4b82-9f34-788dda6686cf", "indicator--678ef402-157f-4d0f-91e2-01b502ab1e47", "indicator--49b4beb6-9285-4910-82df-600ff1254c2e", "indicator--fca9828e-a648-42f3-842a-b40fb2d0decd", "indicator--a924bd43-8a0b-44c6-9a53-173870259804", "indicator--a8592b45-c77b-4d25-a9d8-98722d90422e", "indicator--202e2e0d-ff8f-4998-af91-e1d8c3b79979", "indicator--582695fc-6165-411c-b77a-a710d4885652", "indicator--3dba8aa3-6df9-4358-9270-ba2bea75a750", "indicator--19d30600-d47a-429b-993a-d3997d8b266e", "indicator--cf609882-b756-4d12-996c-4ce7e0c30a22", "relationship--bc411be5-099c-4485-ad20-4481260a1816", "indicator--35541aa1-e4b5-46db-abb9-78e9a1a901db", "indicator--bed1895b-6d6c-41ef-9dc2-c3ac70b0baa8", "indicator--196921e8-59e1-4080-85e8-e70b3b9ae1a6", "indicator--9647a810-33a7-457f-99ec-e17b2cb86f6b", "indicator--487685b0-74f5-459a-a818-a7c9a9f8276f", "indicator--9504d977-198d-4cb0-b34f-e358721d0795", "indicator--be0309f4-68e3-43a2-aaeb-3e45e053b75b", "indicator--8803e15b-ca9d-4575-8500-fe5ef2992b1d", "indicator--669f4a1f-2c74-441b-a354-46c2c894c8a5", "indicator--0221c8a6-b44e-43f7-945d-5e94668b8736", "indicator--4de9c9f0-02c3-4e95-860e-74af656a8c11", "indicator--5213649c-8e18-4e2b-ad68-62234677920f", "indicator--bc001460-43f2-45a9-8432-7bd551dab023", "relationship--221d19e0-8401-402f-961e-ffdad82a33c1", "relationship--a7b134ed-d818-437d-ad91-885786866301", "relationship--6db18da4-95d9-4607-b88c-f046aaaa6bd2", "relationship--9ea58f1a-384a-4af0-8880-fd4f1dcf2533", "relationship--0d6a0d6b-de9d-4fde-a61d-af5e41291f24", "relationship--9bfe44b1-df0f-48ee-80fb-a343a15e57ef", "indicator--3b84083f-afa5-4bd1-9f1a-4de24944ec9a", "indicator--f6a73504-fa01-479d-ba3b-bb9272155f3d", "indicator--e10a6f7c-4025-4369-8d48-3ec18a3b55fc", "indicator--fa5fdc92-1464-4979-8691-bebad0a16629", "indicator--e8db27ba-64c7-4641-b761-5af032e4251b", "indicator--37dcf584-bb4b-4a55-a161-33b9cf4c07a7", "indicator--7b879134-7fa2-49e6-8c2d-7617f5a4bb19", "indicator--d1f128d3-f558-4140-9169-eb0f1d82577e", "indicator--f5b889e5-a74b-4b0a-843c-db26846673dd", "indicator--a5e92986-c69c-44c6-a3b3-e1f5e78bf5d3", "indicator--04176b8c-79f5-40b0-9732-f2d78a307551", "indicator--49161c2d-100e-43d2-bf84-0c90fb842b69", "indicator--0667b43f-d26f-45a9-a983-3aafdf0f220c", "indicator--6f89f595-14c6-401d-857b-36066eea79b3", "indicator--05980101-4a51-4336-aadf-cd8565dcfa23", "indicator--7a273774-e0c7-4996-ba56-436af8af9576", "indicator--98631b25-a713-4fe5-a312-ea58a41a6568", "indicator--d4e468b3-424f-43d2-ae5b-11bf5f19c702", "indicator--c87fa3ba-9888-4afc-8dc6-f30e7413edf9", "indicator--74a03534-a16c-4f85-ab13-51ccb0c1a0f7", "indicator--6584706e-e004-4be8-9510-4f34cdb1d5d2", "indicator--2892a737-2e9b-4dca-b1f8-61739d9fda33", "indicator--7d3c7c0c-293e-4781-b716-5483f3cb5b4b", "indicator--77b68c35-0edd-4c45-9ba2-cd8eec37986f", "indicator--7f8d6ae0-5f54-42b5-973c-2d48c70e3069", "indicator--ab27e778-ee1f-4a51-aaad-9724c3ad3974", "indicator--ecca264a-f5e3-4ba7-b876-b85f9e36becc", "indicator--b3eae4a2-d806-45a0-a2ee-6cd26d1868f8", "indicator--9281292b-3b52-4930-b945-98fcaf287ca9", "indicator--7a567d09-b216-4375-820b-2e918ba0a5e5", "indicator--e1603874-dd3d-4286-9f4b-f6d154d8a2dc", "indicator--74708f0a-438a-4fc0-b526-1165d3783a1e", "indicator--c09bae2a-d299-46ec-9d00-dd54b11f2789", "indicator--f111a705-b611-4f44-b81c-5960304c7a28", "indicator--e85e3782-f392-4a7e-9f0d-11d8b04f0c22", "indicator--11b814b7-d812-43fd-a5fd-01a51fcd7051", "indicator--c06261fc-fded-4983-a7e2-53b7cc3207d6", "indicator--b23027b0-19fb-4b24-8ce5-ba109a94f8e2", "indicator--f8c655a7-c70e-4ee0-ab5b-6b992d0cde15", "indicator--e9823dd7-682b-4472-a9ff-57c267162b7c", "indicator--7e8e13d0-f6e7-4811-af9e-f16144e9aa5a", "indicator--a4c58e2f-9368-47fb-ae1a-b19917154f2b", "indicator--9ce1f39c-eab4-4d80-957f-3cd55f679eb6", "indicator--6a72e937-e2ab-49bc-ab25-db5c07a54656", "indicator--4c45e828-789f-4efc-ac16-c94da51c78c3", "indicator--a2d304f8-3436-4615-ad9f-be2bcf4c87aa", "indicator--83fee863-a57e-4485-a612-4f029ef768ff", "indicator--a61d3638-b473-4942-8298-a0af3851a7a7", "indicator--0790fe61-8e1b-4063-a9f5-07ffe190ef47", "indicator--6b2a2468-57ec-48ae-9e4d-1a39ef808e49", "indicator--6f04d4de-5404-4fbf-990f-0ee6129771b2", "indicator--48cf371c-c878-4ced-b5e3-0b857fc84687", "indicator--338ace59-0ef8-4b67-8492-17026ebc63e0", "indicator--507d7c20-3da3-41db-8ec5-a6d9b314efd4", "indicator--1e65d908-466c-477f-adfb-412ae5d1ad52", "indicator--0d7a9dbf-6431-4f1d-9252-8c263e7f55da", "indicator--f7bb6416-1495-47a7-98c1-5ceb234caf1a", "indicator--a741cf54-ef6f-4682-b230-c41e8e0000cd", "indicator--c090b5ea-7c93-47bd-90f4-c98e0e67a93e", "indicator--13d52680-345f-4162-90d7-05a937c58397", "indicator--bf06e2f3-473b-4fb0-969a-4d475b265c24", "indicator--93d0a230-1071-4639-8578-48e14664c712", "indicator--98341a94-7286-498b-a994-09da015ddca7", "indicator--250cfd9c-39c4-4195-90e1-1de9034768ef", "indicator--b9cf95d4-a60f-4854-ba6b-23e62d441e47", "indicator--ed4ea797-5be0-408b-89d7-b3dbe23e434c", "indicator--7957a78f-8525-4852-8b35-e8a06a996ef4", "indicator--187e0778-8358-4779-a082-245bcee09a67", "indicator--88da2e59-51bd-4693-9802-fc15c6af2c3b", "indicator--7c728b2c-b3f2-44ef-b906-e707f5e076e1", "indicator--f6f36113-01ca-43d1-b41c-54ba519156c8", "indicator--0b3b7772-b3f3-41a0-83de-c57ed587be8f", "indicator--1c9e9ae2-0d69-4b45-8e3e-444610f833a7", "indicator--ae101c3a-53e6-4414-aa07-0fd75fa9e261", "indicator--6c87b743-b919-414c-8afd-b98241633e41", "indicator--1af9843d-5d02-4b15-a1ea-cd273354ffe5", "indicator--7d82d1c3-3742-4c15-a8a9-cf1851443aa7", "indicator--3d7f2a46-f159-4fa0-b900-e557a15c1628", "indicator--72c123b4-9c1c-41dd-a000-6f7cba2991e0", "indicator--eeda3e36-b977-481e-b883-b5da25d1adef", "indicator--89a24cdc-f07c-4531-b00b-ef574a73a841", "indicator--cdce317e-7cea-47e4-ad31-fb97e5227a1d", "indicator--1bc4132d-3aed-43e5-ac36-4127b73142d1", "indicator--65bd805a-61de-43dc-8106-230712bd91c0", "indicator--9816610c-4dfc-439f-a2ff-f94f37eda38f", "indicator--3a81888d-967e-4ad6-bdcd-288cc59350ff", "indicator--ccf08b63-6b9f-414d-99ee-72de37afc8f5", "indicator--f7676d76-27c3-4176-86a6-d8f03a40fca6", "indicator--0e350c9b-2241-4f0e-b204-1299c3e12d7e", "indicator--9dc58daf-33f6-4be5-a862-c771e50602c3", "indicator--87a903dc-cfa5-4b39-9eb4-16269fa2617c", "indicator--b4199bed-3425-4115-8567-8008de50ab2e", "indicator--ae268234-a58e-4dae-aacd-34b7c9607424", "indicator--ad60f6e0-3e4c-407a-bccf-d819b3857016", "indicator--6a5df4fd-240b-4cf4-9b6a-d94708a95b45", "indicator--9060f2df-7ef0-4fdc-b2b2-7192cac36244", "indicator--06f37efa-86a9-40f1-bf91-1ef72bb3dfa4", "indicator--646fa8f0-8d25-457e-84c4-9bc6047a91ef", "indicator--cddbf694-9a29-4020-9337-7168126da715", "indicator--cd9b6f99-b868-4d0f-a87a-c7031c784d80", "indicator--e00aa5b6-c0c3-47aa-bdca-78d8b0e5849e", "indicator--5373b466-f5b7-4206-88a4-65d4e7491ad5", "indicator--57b0bde0-aff3-4e9e-845c-d4dd34cfbe15", "indicator--ad6bdf6e-71d3-4681-98e5-f79ff663ffa9", "indicator--d7685977-c381-4a11-8020-630fd5fbc596", "indicator--1ba03831-aa0c-44ce-a74b-654cf4e03a3f", "indicator--5c33dc5d-3856-4300-bea5-35cddd96512b", "indicator--8e17af71-d5d2-4c2a-8f48-1c6f5a12b192", "indicator--4e690286-9241-4a78-aefe-da0dfa850c92", "indicator--2f04b578-cf07-4064-8887-6671366a0bb8", "indicator--780b2a7d-7235-4a18-9e4b-5a85af7c7ae3", "indicator--1b4edae4-89a5-455c-a16f-ff73d9c8fc03", "indicator--f9b4b043-2793-4748-a626-1585ea0565b4", "indicator--575437f4-38a7-4bbc-be1b-9d7acb70795c", "indicator--dc679c16-cb73-42e1-b5c5-5e5064cfeda9", "indicator--d762072e-4fc6-483a-9933-36857b343162", "indicator--cb0f93dc-ac68-4509-8e7c-cf08b613fca1", "indicator--3184aca0-2ff6-4250-8619-569791cdf795", "indicator--a9d3e328-f464-46ed-a10a-c62649b74178", "indicator--2b068f14-2787-419f-9a53-a35680364357", "indicator--4e679eeb-b5aa-437d-9f3f-fc79f836db21", "indicator--0fbdda07-161c-4be2-99e9-7a5b17a35309", "indicator--9c118ba9-6f58-438c-9b28-ab1af736f9e4", "indicator--a022e9d7-8aec-4a5b-b402-8a97a81b8698", "indicator--e0fa9d3f-fa61-45db-bf5d-5d030df7533b", "indicator--85ba4589-e410-44d0-9490-a901e6a91a20", "indicator--72138f73-6723-4275-b633-195723d4d45e", "indicator--ac32f8aa-fa42-43c5-8477-514e4c6a3dee", "indicator--19a81c41-9aed-4d2a-a183-5593c6cadce3", "indicator--4a604921-1123-43ad-81ee-cf1566312726", "indicator--53afa5cd-0779-4d61-9894-eb9d22ca1558", "indicator--a3832e0d-baeb-4629-b0f6-4b5ed6f0a29b", "indicator--e7c9806a-8d09-48ec-ad5e-a5c7e1a3e230", "indicator--90471f55-88e5-4d48-9931-125a2492f570", "indicator--3a9353b7-fb25-4e0f-add8-0806a6326e74", "indicator--ef9c424b-b3b2-41e4-93a3-53b801c5da82", "indicator--f98c4472-3807-4849-ab14-aa4185e4961f", "indicator--dc725077-e6fa-4a5b-82e6-b280996862f4", "indicator--94a3c8f4-9cab-42a2-a14e-e3040c92edc8", "indicator--d4320320-eee7-45ff-9ab7-eb51301c1c0b", "indicator--74b53f09-521d-4262-aca3-0123a93221c4", "indicator--5d11d2c9-8945-4d0b-8ac7-7cba66373368", "indicator--2d65cd8f-fd72-4b6a-850b-223982beccd9", "indicator--6294d3d4-ccb3-4009-89e2-44f40eccc604", "indicator--0f794f19-33c0-4c6c-9102-b8dfd78deea7", "indicator--45f131b7-fbda-4524-ac37-a05f40d2c7fc", "indicator--a5dd35be-64a3-49d6-a8fb-da9b9b708890", "indicator--a1919a95-d6f5-468b-beef-aa8c30f648d6", "indicator--f86b092e-d625-4461-a411-368d8985ee09", "indicator--72a71d5f-9204-42ec-ae42-bb6f86bd06e3", "indicator--135e7067-9b71-4861-a365-117629afcafd", "indicator--0b8f2e12-4221-4c86-aa0a-88f156a12a28", "indicator--8c36fa57-6556-4a42-bb5d-90975ee23420", "indicator--09c0be29-b9c2-4c2b-aa81-d6f341b73c7d", "indicator--779328a6-d8e8-4e19-84e6-43e366028a10", "indicator--ef86cbc7-4314-4a33-bb99-9278756678a6", "indicator--212fdc8d-9003-4a09-a5d6-cee180b93e97", "indicator--e9807569-cdab-4f90-b1b8-24b59c4833cc", "indicator--41280e4a-469b-4629-9727-d1bac481217f", "indicator--f41ba925-cdb1-41de-852d-95d281bcf368", "indicator--2d3611a9-5575-4772-b562-415fdf2ad63d", "indicator--e60c0432-70e0-4a62-9b31-be38749a817b", "indicator--51734148-dd60-4b86-8641-432e992f0cf3", "indicator--330d52a3-4004-4143-9075-baf42ae0b94f", "indicator--ebac5a3f-c251-43ec-a76a-88da3cc1a97c", "indicator--94777256-1ca7-4881-bece-9770599d5793", "indicator--6c6baaa8-1ca2-40e1-ad8b-5ed9349bb8ec", "indicator--9eabb2f1-dbe0-475d-8597-0bf4c44254c5", "indicator--0833fab8-df3d-4987-8d12-b3ed5ef1fb90", "indicator--ba472fb9-9eef-4880-98ef-e5f86eb660fd", "indicator--56807b0e-55b5-40f2-98c1-b72fbd08089d", "indicator--5b64ecd1-6f06-43e2-974a-7da899f24dc6", "indicator--5d0b6040-de5d-43e4-93fd-b69327148f03", "indicator--f0299159-6130-46ae-8c8d-1a200fa02ffb", "indicator--92cbfd99-29dc-448d-8162-0ddb307b7ce5", "indicator--8c25872a-d545-4ed2-ac1e-1db0271c7027", "indicator--fe488b61-3f66-4fb6-915a-8d910351eb7e", "indicator--9e5abe68-a232-447d-ac9b-68380478bc2c", "indicator--cf370706-da9c-4bb2-bcb6-e591e1a2d08f", "indicator--031b6c20-e28c-41d1-897c-ebe6c04ead91", "indicator--b0370643-c15d-4884-8881-b69818d95fba", "indicator--b1b1405b-422c-47b9-b839-6383a3d9bc6b", "indicator--66f40bd3-08c7-4d02-b812-2363961b6272", "indicator--8caee3e5-a1b3-4e40-aa1f-80c0d9dbdaf8", "indicator--d350ea9c-5bbf-418a-b066-ddec2ed14f01", "indicator--66b3071c-a09a-416c-9369-68dc0156ba9a", "indicator--3f3b6af8-fd76-417e-b729-e983a7667296", "indicator--68c86759-17ab-48ff-bef2-a57c281ab2fd", "indicator--ee0794ab-0af6-4241-89e1-66b1bc458fef", "indicator--3897adc4-c224-477a-aef6-ebdbd367cad3", "indicator--7acf8414-bf26-49e6-9d4a-573a7f185cf1", "indicator--5edebde1-7002-4c18-8429-259ea4df5a03", "indicator--c6de4a5d-19cd-4cfe-bf5c-3f17166e8d7c", "indicator--e61562ad-3d58-46db-ae78-db12b3738e4c", "indicator--bd52fb49-f420-48fd-8649-a6f8bd3a077f", "indicator--9367d2aa-175a-4ec5-bfa2-b4fc6b6a6d8e", "indicator--b38f84dc-435d-431b-b6d2-9ccd155da6ad", "indicator--8e87e9ff-df73-4204-98f5-7b8ed6718658", "indicator--49c01586-2cef-4805-8f88-44c327349d71", "indicator--194d8c77-6707-47ae-9e9c-6fe9c3bc4235", "indicator--9946cab4-c341-4a8b-81c0-8133d6947fdf", "indicator--362a69d9-ec31-4425-96aa-7309d49cd1e0", "indicator--37a873f5-666a-45da-bf7e-ed17f906a3a1", "indicator--e2ef4ff9-acf1-49ea-826e-629c61fc236c", "indicator--757f5d4b-46d5-4c34-b33b-40ac40cd5667", "indicator--d4075ff7-0a8b-4699-8a33-6e52202d0e72", "indicator--9e22fc94-d7a6-4eeb-947e-a78f4fb545d3", "indicator--3346e6df-024a-4e55-9e1e-0400b9b8b6ca", "indicator--4cee0e1f-0661-4c7b-b7b5-40f9bbeff1c6", "indicator--7cf1fd40-44d1-412d-ada4-2df3f8d49034", "indicator--9f4f2cb5-2435-4c9a-87bd-03f175dc5058", "indicator--1e874edd-2aaa-4e9c-bea1-4d9024c6caa1", "indicator--dc69b3a1-00a8-419d-8042-4e0b26111333", "indicator--1de1a32f-41be-40e6-87e7-d59646d40cb5", "indicator--a6ec8b6a-b724-41ec-8cb4-596aebc64ed5", "indicator--e0592ea6-0961-4dfd-8c89-1bcb1979ed87", "indicator--30b20b59-eda4-477b-bfb9-acb19ec5c8cd", "indicator--8a4d8b86-2868-4155-83f1-4bdcc818c5c7", "indicator--6cdcd1bc-c8dd-48c5-be44-c44f8f33bcd1", "indicator--d1d2a678-936b-4bb7-8916-b9ec751b589b", "indicator--6a9d1d76-453a-4708-adaf-5895b147eacb", "indicator--dccad5c4-6dd7-4403-a7f8-880b38f24a65", "indicator--dbc9a61a-a140-4f74-9e09-7333f5b41e8f", "indicator--31a13629-cc1b-4478-bd2d-f77729e8f753", "indicator--f3fe1be6-92d6-4bc5-a2dc-b64e4bd202df", "indicator--6c842989-50a1-46e6-9321-82755db583f4", "indicator--322a03e5-6224-4b8d-ba12-3c87b290d554", "indicator--94a6608e-cd9f-4c16-bdc9-062919772dad", "indicator--af477db7-6e24-4a23-8e60-e58db970c7ea", "indicator--d4d88adb-ac6a-4ee9-b901-339f7fbaa914", "indicator--badbb53a-e081-4ab4-b263-0187e5718b28", "indicator--f6efd213-fbf1-4a48-8890-639a53032aed", "indicator--ac9f8095-ba70-44de-b47a-c47c0656f4f2", "indicator--ad1d22ec-ef17-4f85-89c2-549ed74eb32c", "indicator--b362ae71-ecd7-4f67-8074-9a3f024cb895", "indicator--a09ebd81-4a9c-4ee9-a388-0d4de8b357e6", "indicator--ffcbb700-d73c-4c88-a637-5a2d6731f8f1", "indicator--5b3f8e30-d405-4ce9-9e4b-f215ec4c3f8c", "indicator--ade118df-d70b-417f-9841-0a7d49de94a2", "indicator--097b2a36-17dd-44f7-a52d-017a13ffe480", "indicator--6df77ec5-ccd7-41bc-97a8-6c134ad9677b", "indicator--7de39cd4-4959-40ee-a9da-276e7c209cfe", "indicator--0b4153f0-ea88-467f-ad53-3f46644eb931", "indicator--f4684110-ca81-4752-ba49-fdaf86e4c9af", "indicator--5d63d6ed-6b5c-437a-aa31-0763018c50ea", "indicator--719ea0e4-e362-49a9-8b06-578092239f28", "indicator--49e0e421-6fb8-4cb1-98a9-6a5de698f7fa", "indicator--a39e2e16-d6e5-4b3f-8cc0-19a214dc028b", "indicator--bc633d6e-1727-4d82-844d-ea0436410aad", "indicator--340754eb-79f6-45e3-b8f1-f2d2c37c3e41", "indicator--f6f637fb-a21a-4856-b77b-537c09d165b6", "indicator--70fb451c-ef49-4e5a-88ee-aecc9b33e019", "indicator--02d82ec0-f005-4538-86a6-a558c2bc333e", "indicator--080dfaf1-8ae5-4842-a46f-819a58201ea9", "indicator--7f8a6c69-31ed-4be9-be1b-42f42364cb28", "indicator--75dc5a83-69e6-4eab-9e4e-ece5ec6313e7", "indicator--774d9b39-156f-482b-abec-ee94831783bf", "indicator--f2946605-ae9d-4ecf-9246-9866b2e3de75", "indicator--ca4f3235-20ed-4833-9780-8f28c74bc4fe", "indicator--d732bb32-c1bc-4044-8f81-72a4d62dff78", "indicator--0ac975a9-f26e-4da6-97aa-a7e01635a5b7", "indicator--44e0c20f-020f-4f46-b1b7-14e4b2711862", "indicator--6c733a7b-2838-4d4c-88ef-7acee5920e2f", "indicator--ab2693f6-e66f-4209-b8f4-ed314d27208f", "indicator--ec96cdbe-c7b8-4c59-89dd-a2078777ed4d", "indicator--5d2e5e13-dbc8-4933-84cc-51e383fad69e", "indicator--7257b4f8-a9f5-4121-b209-1e5727633f9e", "indicator--bc857554-2fe0-4318-897b-f69ac1ff4fc4", "indicator--b6b184dc-8a1d-43ed-aa2e-afdcfaa494f8", "indicator--ea4352ba-0855-4746-9269-05e086c1659a", "indicator--caee85b2-3ef5-43e0-b518-d4230e52d839", "indicator--4f79fc1e-04bd-4a89-ab48-27a232a529fb", "indicator--53d21365-d9aa-4251-ada3-8cc8ce7c56f5", "indicator--932a3e07-c131-4ef8-8359-047f899a5689", "indicator--40681762-8b76-49a8-93f9-4e56409e03ae", "indicator--c7ea6291-c095-4a26-83da-b9f4d53650c9", "indicator--cb238832-f2c6-49b7-aa18-98f273c9b059", "indicator--e385ce83-4c05-4519-9c1c-4598f8886331", "indicator--d4a98571-8074-46eb-b312-223510789cbe", "indicator--ca801a15-ce49-4d01-b3cf-8f592d79f694", "indicator--c421c6c7-e03a-4617-abea-ddbdd34f4701", "indicator--cdfa009a-ddaf-47f0-95a6-64811fb7908b", "indicator--1271d76c-ab10-4a4c-a33c-77a1eef80604", "indicator--ba348495-d3dd-4081-a8b3-f1634a987c1f", "indicator--cf07e5c9-af33-4a9d-9f57-e093b361ffa1", "indicator--fd4c077b-31f9-4af4-ae53-6c87def51aef", "indicator--275b0473-1bdd-471e-bcf3-1d7eae8018c3", "indicator--cbb7b2b8-e8aa-4405-9182-dfeaa310904e", "indicator--0f2baaaa-9762-4375-8ef9-94fb088c35ce", "indicator--76524642-4aaf-4e61-8482-ddd7aaa9771e", "indicator--22e62d6d-9dd7-42e1-930e-d5318e98d085", "indicator--1429b045-7f4b-433a-8d79-e067cd758cf1", "indicator--159c57ca-4d6a-43c6-8c6c-240a24bf3ed8", "indicator--9111d738-152c-4010-91a1-b81614b29811", "indicator--ce1152d9-c9e0-4f74-8333-777008a02d5c", "indicator--82f27d6e-a22a-4d0a-829e-8675f83fbcbd", "indicator--b4d09819-6f13-4a09-873b-1542f29de97b", "indicator--afefbd82-3c15-498f-a9ed-e338ff338db1", "indicator--a5a2a4b7-d395-4ca4-8992-ffd96aa1f552", "indicator--f5bc8343-b125-48c4-b496-4033e6d96464", "indicator--86758d1f-e5b4-4546-9b8a-f9bf58c4103e", "indicator--94d60d0f-8428-4695-8a4f-4b3b649e6747", "indicator--ac998b35-46df-4b51-9efd-47a917d967cb", "indicator--16a66c63-1806-48c6-b440-80ef521525cf", "indicator--f6d039aa-11ec-4d45-bf47-549f8cf3cc1f", "indicator--73f97a62-09ed-40b6-8d4b-89580b8c52c5", "indicator--c8ecc129-338c-4cf8-91e2-207f760bdbe2", "indicator--a7ae6964-8d09-4311-9104-d17313aaf334", "indicator--76801e26-a20a-4bcc-a9ea-0e3f63fcc31d", "indicator--32e8d180-4c1b-4eaf-bf36-6a242d9e0b34", "indicator--18c2c853-9434-41d2-a4d3-6691d45bc359", "indicator--ec84e5fb-15ff-438e-9e6b-9c72fa07528d", "indicator--3c89449d-740d-4282-a1b9-d68e73b1a01a", "indicator--6939aa17-1f30-4ee7-8df6-70bfbb0a7eb4", "indicator--3c914e41-ecd8-4c89-8d9e-9ef9e82bb503", "indicator--fb2f5675-e06d-4aea-a991-bd050898280f", "indicator--08cdad2d-d3a9-4d3c-b6a3-4a50e9aee099", "indicator--e7d4281a-4735-42b6-be1a-0ed8e9e4aa1a", "indicator--c56e6039-b6a4-4e9f-bcda-f5592e2632df", "indicator--1e3bd604-a6ef-461f-a26f-6e6679041488", "indicator--63d512f4-3b6e-4f48-8e68-f86865d0dd5f", "indicator--e53c4f63-0085-456b-832a-de7bb34c26f3", "indicator--fd88e2d1-5099-4fbd-901e-9b264aec88ef", "indicator--16e0d70a-141e-4f76-b716-afd7b3dd252d", "indicator--f43ae631-ab01-4724-983c-b34e8328866a", "indicator--4f1aa711-a894-4b25-a0cd-d2ae06c0dda3", "indicator--63bbc5d5-5c91-4486-b029-03522bd0abff", "indicator--4b7a7e31-1b0e-41aa-9bac-7558f6710dc5", "indicator--d9082be6-b878-486f-9129-abcde056e89d", "indicator--a146547c-9b0f-4003-ba1a-214cf6766297", "indicator--c5ed30e3-a17e-4022-9bcb-c4223c46d300", "indicator--f14b6355-3400-4b6c-a636-494393f45fb2", "indicator--414cd64d-0649-4050-9893-8fc15e7873f6", "indicator--5ea808f8-7513-4cd7-87ff-04d2ce33902b", "indicator--0cc3c4f2-4b17-4cf6-8060-3e5300755a88", "indicator--15e96b6b-f083-427e-b4b8-dc4e50226145", "indicator--9c10d63e-69b1-4d09-ba99-7fb87b956b90", "indicator--ae65be2a-0ba4-4733-ac54-93cee6ddc014", "indicator--7d8649ff-88fe-45a1-b844-5b35b772b5e8", "indicator--13fd6f8e-83f8-47b9-b65c-466dfed610ad", "indicator--4b779a63-a02b-43a3-9872-b19dc1097e6b", "indicator--3d42327d-9c85-4f3b-9691-abde682b86bb", "indicator--f239bcce-98fc-4e3b-b8d4-ca5be5ed8ec7", "indicator--02445316-6cd8-4863-ae58-84bc5381c365", "indicator--b465dfe3-9db3-4e18-87ef-7a819fbb4647", "indicator--dde89b58-5225-45a6-8f2e-2757a15ca93b", "indicator--a1b4179d-fae6-4b8a-ba8e-ebc779274e50", "indicator--7b817e31-49f7-4312-a40b-7ba1f91b1fa5", "indicator--5dede2e4-14c5-475d-9974-c2bf49b05fcf", "indicator--4fd472d2-8b0f-4f7c-b902-2bcb6e1429ef", "indicator--e23e9324-784b-45fb-9c31-b0647b39378c", "indicator--62069e5f-2442-49f2-8fdc-0f0f1316b92b", "indicator--e5f49c03-7d76-48d6-adbc-6659dfae0be0", "indicator--e79f65de-660b-4751-9a0b-d9a3d694b3b9", "indicator--7ad4c731-9600-4ce4-8fa9-605103688958", "indicator--1101266a-af99-44c4-ad39-21be2b5984a7", "indicator--0b1481a4-09e1-4bbd-9fae-c6678169c901", "indicator--dcccec79-3542-4bf8-84be-3e69790d8215", "indicator--103c5d67-4814-4251-b394-c67c7442356d", "indicator--4897b1e2-186b-4c71-b02a-3159a0eef6f6", "indicator--d4aca5f8-c84d-4421-9875-d3bbbb6d5040", "indicator--cd0b89d1-6364-4727-bbfe-218074a919d6", "indicator--703a122e-f245-407d-9801-fc27ce8a0525", "indicator--1efd4291-d871-49c8-9e78-b214ef682090", "indicator--f12366fe-bb21-431b-af3a-6b352ffa97e0", "indicator--4617448f-4884-4435-851c-318088521432", "indicator--fcb7704d-c479-436c-9966-ed0e159dc445", "indicator--0e959442-9ee4-48ee-8017-114f68ca679c", "indicator--0e135136-b5da-4a2a-9a4a-4dd863a4e1ed", "indicator--3aa505de-2ec2-4677-bfec-7b50ab2df2fd", "indicator--818d984e-a0f2-4e6a-a6d8-88d1369160f1", "indicator--06a7927e-50f5-43a1-b5d5-0d61b4ad2bc3", "indicator--4dae35bf-1255-4534-a355-9a286d6f6ce9", "indicator--c3896e05-0903-490b-93ba-2296a9b74460", "indicator--b569da31-1128-46ec-a229-6db86cd8a350", "indicator--c6860536-87bf-46ce-bfa3-2200f6344054", "indicator--79aa39e3-0445-4114-a997-bb6764c3cb2d", "indicator--109e9558-e518-40ee-9d0e-ef3482636668", "indicator--c681bef2-3595-4b35-adee-7bb0f954c04e", "indicator--3e2d8307-698b-4b50-9ebf-d491280ac521", "indicator--6beacf0e-2a76-4eb0-809a-ef63b9868206", "indicator--0e7eeed3-ce7c-4d8d-9b08-16f49e228c5a", "indicator--e9b2ba9b-7cb9-4053-ad33-fa8784981190", "indicator--c28b3f03-446d-4017-a652-09535d9f2678", "indicator--cd2b7013-31f7-4527-91da-0c1c289cef05", "indicator--23c5ca24-71c0-44c1-96d7-534a3767307a", "indicator--93a0c537-49ba-457e-b5aa-6c885d645004", "indicator--81fab6fa-f95d-4526-b6bf-4a8c73d688d0", "indicator--e8cbd538-0f96-4037-8de1-7e5fba85e620", "indicator--79ca99dc-8486-43fb-8806-44aca2379ad7", "indicator--cbb6bf71-6685-48b0-a4f1-a2db3955b639", "indicator--e01772c1-6ee7-4948-a189-dc25d5b117a8", "indicator--6e160579-9424-4cfd-b768-86325c990f0f", "indicator--689ba5e8-0018-4747-b03a-9f72f5332f40", "indicator--9c031d90-52c7-4ec6-b093-2927336355d4", "indicator--22f751cb-cf4e-4719-8a33-e6b8bd049e32", "indicator--277da7d0-3ace-41e3-aeac-010236435934", "indicator--31f304d9-8c71-43e2-8ff8-d79b9d1d930b", "indicator--47361dcb-075e-4ab9-a6f5-2f2cfe2c567e", "indicator--3ba42613-3e63-4840-8626-e2db4925df4e", "indicator--63358c19-9128-4332-8936-7e31d72566ba", "indicator--21c5cff5-8210-4889-a951-d71b864a62b6", "indicator--109ea2e1-dd2f-419f-9d72-fb4f95ce3a3f", "indicator--aa63a623-c3ad-4900-b95d-25a032b4e2ec", "indicator--6bf128c8-e29a-4324-b47b-44d9d5c5e590", "indicator--d8582da7-469f-4c41-ba97-14a99b7f8c7b", "indicator--e95e3221-95fa-4a4c-a39b-800d418d0413", "indicator--ff0fee2d-ef04-46a5-8f8b-0766a32d448b", "indicator--30d37516-b0e8-4b5b-9fa1-ff8a7b43e83c", "indicator--623b9c13-375f-4f89-aefb-8c498c90ad36", "indicator--b74a4c67-1780-4d57-810d-f692f031c543", "indicator--42acc950-3ee6-4325-b6a4-b9f5cc4597c7", "indicator--50508489-312c-4879-8371-c2d5458c20c4", "indicator--ba682caa-8fd0-40a1-8cbe-79f65b62aae6", "indicator--bd733e99-56ca-45c3-937d-5f9ccc9779df", "indicator--4fcd7a03-a0a9-42d9-b025-a46046016814", "indicator--b499f875-4283-4297-b6f7-88213399aefe", "indicator--958b4eda-ad6e-4e5b-a9b8-b1ad8a37e8c2", "indicator--2319c022-0077-43f6-8313-37c45ba42706", "indicator--92bdc06e-f5b5-46dc-b9b9-5b7a3ff40cd1", "indicator--15f53509-af69-449c-be16-1ee01fa0b37a", "indicator--77df2491-2660-446f-8b33-0a97c46b4ed8", "indicator--3a3b2ace-c089-4054-9931-db0612c663ab", "indicator--d7933018-10ff-46a7-98dc-0bff5278ac2f", "indicator--b854f917-df22-4aa2-9791-6e26982cd012", "indicator--15d08c61-e824-45b1-8566-6348022c10ee", "indicator--d282a18d-a37b-4176-853c-d09dcc1708df", "indicator--2cbb5c57-03da-4377-adad-d2a379c46a82", "indicator--866277fc-5c12-4f6e-9447-a662c0f4ff37", "indicator--2094d9f0-4556-411d-b053-c73675f8d938", "indicator--a22c8b35-1037-48ce-a38c-099fcce2e038", "indicator--57dac1aa-67ee-4f1f-a01f-a30a926be07a", "indicator--683a3e09-1e19-4de5-a99c-e8380bb6fec8", "indicator--8b755b4d-912b-4fe8-9735-459495ad5b8f", "indicator--8721f2cd-2245-4861-be58-fb89e1424ce4", "indicator--8de4aac5-9d71-450d-a14b-c1dbc877e33a", "indicator--8ee170e9-f392-4fca-a496-0a474713cce9", "indicator--fdafdb92-5f7c-4605-b77e-e580cf18189d", "indicator--3f305693-f898-4179-86cb-dac30278eb36", "indicator--f87ff933-5a8b-4d04-b232-6abfc99dd062", "indicator--06a2e4b8-7563-4f7b-8a1a-98d87b2ee736", "indicator--b136025a-ffc5-4b9e-9c0b-016197a1e74b", "indicator--ea958de6-7c43-4a84-8707-3a7aa5aafec8", "indicator--6bdacf2c-3d63-4904-967a-8d02e8058d8c", "indicator--eee27ded-0d26-4d99-a770-9fd8f1d15b89", "indicator--07bfaafc-9e71-48b7-a49a-986584318c24", "indicator--ab9c6eec-ad96-4a82-aeff-407d550de648", "indicator--716a7dad-11d0-4f03-82cc-7dd0a2ae4f59", "indicator--8ebeb62c-8735-417c-b5b6-5b085bd3a4da", "indicator--bd33f79c-2958-4dfd-a70d-051124e13db0", "indicator--9f813ce6-a871-4314-9a17-5db299fc052e", "indicator--3a3ff586-f0ff-44aa-af8b-304175fda3c2", "indicator--8ed42e41-699e-4f6d-8c08-225656e29392", "indicator--e88b925e-ee52-4896-9829-7dfd8f618e45", "indicator--a7cceb33-a36a-4423-acd3-9f39e30c5011", "indicator--2ecbd1ac-e7ef-4f5f-b19c-75b1e9023ec0", "indicator--28e21787-05fd-43d0-a0a3-67a4b87d4ca0", "indicator--53ebf694-b3bb-4b64-a28c-96d38d0554a1", "indicator--c5507c53-61b9-4004-935c-61cf480dc790", "indicator--e6d03a9f-d9fb-44ff-b881-b488d8e0292c", "indicator--ad75c838-04d4-4ed2-bb84-8d0c0e84d957", "indicator--b95de5b4-dbb4-4b3a-9c74-673dcefe54c3", "indicator--4847b8fe-1100-412a-834b-abc1f96fbf18", "indicator--57882e38-682b-411c-8de4-23943cdd2d28", "indicator--ff0b7fe7-7ec4-4dbb-a982-8e7d80fccad4", "indicator--0a3bf5b9-317d-477c-b8b6-8d6b8fd5a5c7", "indicator--65d52205-3212-4b6c-8d74-9a0ff6b6a0c9", "indicator--cc99b373-9737-4611-aae6-7f0574a1885d", "indicator--10e32f61-855b-4b8c-9215-47974306221f", "indicator--3c3300f3-3375-4cb2-9d9a-00628d5824d8", "indicator--04f804e8-a202-4c4a-b236-c1f9888709b7", "indicator--27a8c127-e058-490b-9cd1-3e5e8b01d2f0", "indicator--15e7b2b5-8a04-4c00-99c9-267cd4527cb9", "indicator--994c1957-a1eb-4b0d-8a82-92c069fd97b0", "indicator--7a58268c-0f6c-4139-aefb-131534e50977", "indicator--8632c638-f65e-455a-abd0-3793c7c2583c", "indicator--22323735-078f-48e3-b921-dc06e6506cdc", "indicator--9ab82ed7-6820-43d8-9234-b3529b2cf981", "indicator--b149e415-8a65-4fce-ba4c-b97eaa2918aa", "indicator--89a6a4c2-364d-48cf-9b72-b9441195399f", "indicator--218c8013-b4e7-47f0-aeb1-17687a2dac5b", "indicator--57c10b11-5762-44b6-882b-bd7a15b0968a", "indicator--8adc042c-fa54-440d-8b93-8f49923cc0a2", "indicator--c3d6457d-81d6-4dd5-9c72-363532921e2b", "indicator--13ceacab-1beb-4943-b6bc-7bef5449220c", "indicator--eb81770b-2e8c-43ab-9dd1-263b78972203", "indicator--ba0c3c95-60a0-4321-b7b5-f0d7a16b6202", "indicator--88e05130-9a0b-45c9-bb7f-30cf8f190314", "indicator--27ab6937-81fa-4642-a557-7c0527e5cd4e", "indicator--720389d6-878e-40b9-9766-9b2c37ff19ed", "indicator--0f7660cc-cc1b-4d7e-b1bf-6ee5adbdcb45", "indicator--93576209-6b05-48f1-8546-b35692515030", "indicator--af00278d-d71b-4f11-9077-70c64b01b027", "indicator--77335af4-b119-44c1-b2bf-20d1056db7c1", "indicator--29d3c54b-334b-419f-b27c-81cea72222ac", "indicator--aefce0ed-65bc-49cd-9c48-6daa58c5c78d", "indicator--35e16610-4292-4770-93f7-2764fee52ce6", "indicator--db9774de-67e7-4a04-b347-eae56727d975", "indicator--3368da7d-50e0-42f4-a5ad-53711ac7ba7f", "indicator--461f729e-4a9a-4349-be8a-fb2587eed188", "indicator--3d6b6682-7bf5-4d46-9eea-ed4256219844", "indicator--a67fc43b-4b37-4bc6-8ca7-8d4f012cc3c4", "indicator--43856615-29f8-41f6-8d18-0dd2c2a37a3d", "indicator--9a72d402-9a8b-44bf-8a75-829f638ca272", "indicator--dcc07e42-a58f-4210-8bd0-af6c0fd28d11", "indicator--0fe72240-56b3-42e5-89ea-dd04fbca1dd0", "indicator--d6aaecd6-a9e4-44f0-9151-537d3539d26b", "indicator--ac1564f8-2da2-4d0a-b349-3aacacd7b2e0", "indicator--418776f5-da4d-4faf-9c52-9b2ae923aaf3", "indicator--3e6b9582-5bb1-466c-b763-bd1cad2d311e", "indicator--671ac13d-a4f7-4de9-b183-a8b4516f2972", "indicator--a6172762-7c97-48bb-b327-ed9e250b2117", "indicator--68c53752-f188-4e7f-98ba-2e976850ee90", "indicator--ae0f601d-36fd-46d9-b7d8-76d28632a83f", "indicator--3d890e71-7a5b-452f-9df2-d3068b98cf9d", "indicator--fc861227-c586-4ae8-a2b8-eeab1b4eb4ae", "indicator--7ec72204-db1b-4108-8997-046a376cb4de", "indicator--4d1f5511-3b32-46df-92f7-11ce8688eaaf", "indicator--3490f254-12fc-48da-a071-961db9798717", "indicator--404ebc79-2f4b-4d43-bed0-0af365e7f90e", "indicator--ab818596-bc9e-4463-9da8-eff6ae31fc94", "indicator--34587b02-b32c-4218-a126-e31572130308", "indicator--3b5be5ad-ee24-44e7-b5a5-0afca495413e", "indicator--272c89f7-6e6c-4cd0-bdd7-cc0d3e7c05dc", "indicator--c2b314e1-c81b-4a20-84cd-8a6004af3098", "indicator--0d98fb80-6d9e-4e64-9d13-90640cc62692", "indicator--53b2e95c-e3b1-4e0c-9a0f-2f4a28dfe043", "indicator--61d6d82f-7173-4161-a8e4-4e6ed57b1b7e", "indicator--cbbb8dd0-5679-40cd-a859-df983615b20a", "indicator--d64c7711-24a4-42ec-bc56-b721997283c7", "indicator--2a5e8697-0784-4211-a690-8b36b154fb8e", "indicator--a98c5a62-47c5-4e0a-b6e8-f4cad89f13da", "indicator--9d81519a-6ed3-4dce-b370-cffe80b7dd3e", "indicator--f5413f05-aab9-4d37-9c94-599989575d98", "indicator--dbac5637-99f1-43b0-a951-4e009ece12bc", "indicator--8d04eefc-94df-42da-b0a8-9ed54c8d380f", "indicator--4716ee04-25da-4eb5-a70d-f6ae8a194b06", "indicator--55db2319-0f64-423b-bafb-40f7c66e8397", "indicator--71874ba4-d402-4830-94ef-1548d6437ec9", "indicator--6701fcec-a344-4cde-8c1e-dba4203ee415", "indicator--74687d10-c8fb-43cf-986e-2283f74b5298", "indicator--dfca746a-82ea-4ccd-ae5a-350c46110774", "indicator--80be16fd-9c95-41be-895d-d9c9887dde4a", "indicator--0b20a8fe-65a5-42ad-af6d-08872173e6b5", "indicator--d997984a-cca7-4bda-a913-c50965687d13", "indicator--0642fb93-bb88-485a-843a-137a474ceb71", "indicator--5abccb52-bf8c-415c-b1a5-00a8054cb1eb", "indicator--5cd01edc-2cec-4be7-9702-0fda17e251d1", "indicator--6e4762e6-832a-4d1a-bee6-1a574bec7971", "indicator--5aa69ed1-72cb-4bdc-ac9e-600e2c7b62ab", "indicator--70b0ba3e-f33b-4b9e-8299-817f1d5777c4", "indicator--446ca1df-04ef-4157-bcd0-80173802f918", "indicator--60ca91f5-c992-4d3f-9c1c-b663ea5d7402", "indicator--6b656637-f5ac-44a4-af1b-71dff5a83d61", "indicator--833b1952-2ac6-4211-9170-c6d2981a62c9", "indicator--0833c4b4-5e6e-4ed4-bccb-1f81336d1274", "indicator--82226717-e022-400d-803e-018b51404848", "indicator--907b1026-b478-420e-a0c8-e8c389f8a70e", "indicator--e769907c-3c06-41ba-b712-9562c1951307", "indicator--3c9db50a-19fe-42a9-a522-689f0c8aedb7", "indicator--e459e6f6-3752-4a84-81b3-92c2d5ddade2", "indicator--c05cbbc8-7fd8-4134-b712-625b9bec165f", "indicator--3ac7532e-33bf-4b77-b8e3-46b5e6c9fc34", "indicator--a38ee4bd-0de1-4b6f-bf14-088264539090", "indicator--68472f56-9936-4675-b1c0-9d8024c88b2d", "indicator--6e287936-9a99-41bc-8363-f94424882756", "indicator--2abe349b-5d9f-4d65-99a3-d97a5aeade18", "indicator--28af1b61-8315-40a3-95bf-68b35e7002aa", "indicator--147d9a29-f839-44a4-a153-bb3f12530b9f", "indicator--4b9f2337-994e-442c-98e2-cca5ad398689", "indicator--c97085af-5d03-40c0-9349-d0182c4ff2c8", "indicator--5846dd8e-5d66-4a61-b16b-1c61d85b4ed5", "indicator--0126754f-4d64-4d48-b593-f557b7a98299", "indicator--d71ce040-48a3-4ecd-95eb-20b5432064eb", "indicator--b042d157-efe2-4ce3-b824-2c6cb2e475ca", "indicator--7d38dd74-0ae7-480a-bbb9-b5c17b06de68", "indicator--f3ef679e-d351-4cf3-82e1-c057f8b6c200", "indicator--8de8f296-8e72-417c-a0dc-c194c8817f2c", "indicator--dcbae606-b798-482b-86fd-f49fb580841c", "indicator--d3aa260f-76e2-46a2-837c-25c806ee6eeb", "indicator--46a4f594-4b16-46dd-9306-9db937173f4d", "indicator--720a6526-a76f-48ba-bcb9-75ea298aaee3", "indicator--51232072-894a-4c88-9cbe-c07438dedf77", "indicator--c5a91fd4-a9e6-42f1-8855-f8f298ea4a8a", "indicator--0dd1d817-6ad6-45f1-bafc-05a3bb932a9d", "indicator--47689f33-63c6-4a88-938c-4647873f425c", "indicator--82b7672e-907c-429c-a616-656b031d7fdd", "indicator--c632a390-3a44-4a39-8daf-4db8a60433f8", "indicator--67996e2a-3dea-4be7-b4c8-987b477642f5", "indicator--b4f83ad5-8301-4fad-99d2-534316c2997a", "indicator--96748a69-3848-46e7-9590-b5e82637709b", "indicator--46e3edc9-3329-484e-8bb1-749d397b6baa", "indicator--0b51f99e-1bcd-4a2b-9885-b7f1e1abbf83", "indicator--2c2537c1-8b17-4bc0-97ea-5fe8b207f146", "indicator--525eeab3-8a98-4895-be0d-b0b95bfc0a0d", "indicator--5f4f050e-4db2-4b84-80d7-60573a03599c", "indicator--4d8e0830-fdf0-49e7-a77b-6fc05a68424a", "indicator--d9e6a2fa-4e04-48f1-9717-b7b998f1f429", "indicator--f6d2344c-fec6-4304-b9db-a7f8a8d70a40", "indicator--f6283df4-13b7-4a12-9f6c-ee9303575852", "indicator--c980a2e8-b534-4356-9cb1-08caec87c68e", "indicator--92f16439-54b5-4a1f-a004-52566482bb47", "indicator--6efac461-a1c8-40ba-ba3b-0731f19d0410", "indicator--20b3b483-8fd1-4ce5-9df8-7c6797513021", "indicator--a31b95b8-2f16-4037-832c-7783d6a535c7", "indicator--c17081b2-be26-40d4-b2ee-ad09234a7865", "indicator--f9488c63-f81d-48a8-9f8f-0ccef5ce1027", "indicator--6bce744c-2aa1-4187-bb1b-3d63db11a67e", "indicator--59b78a62-7de0-497f-9c35-a8fedf8ed2f6", "indicator--52d52ccd-34e7-4b04-97c0-449c6a790f11", "indicator--e59bfaa5-ba3b-4352-8c79-a1c9488bed44", "indicator--f79d07ed-60dc-4487-a74d-1346418740f3", "indicator--ec0b4ea8-b0bf-427c-a6e1-1211e91d9a5f", "indicator--885f4a10-eeea-44f2-8a26-c27598ee191a", "indicator--e3ab70e3-85e5-4df1-b01a-ce4ea1c2f43c", "indicator--5799a7e8-e8c9-4428-b28d-11430a1dce15", "indicator--f56a59e2-ee2d-4b28-ae2c-d600cfe16c63", "indicator--6d56187a-c327-4b9f-a356-6b6a2ba272fa", "indicator--f3790d3e-dbc0-48b4-8b6d-563aa6ec31f0", "indicator--487f13c8-7785-46db-aedd-0b1f9bbb2474", "indicator--74fa650e-2426-4b24-a991-97602ebfb8a2", "indicator--99a4445a-32b4-43af-ab68-727048a54f49", "indicator--879366ac-4e66-4d42-a843-c7d5106598fd", "indicator--23595873-75ee-4868-9daa-7a2ea0c53a6a", "indicator--de7b4c9d-7758-4012-8fba-002bdf583669", "indicator--56f8bdb2-cca1-4a50-b827-2ad7bdb79f6d", "indicator--ca03abdb-f957-4cce-8f97-ce4af77d70a1", "indicator--f3423305-e727-4d17-9ab4-50744dd3eb15", "indicator--bf8afa80-26b5-43f9-9893-9657ddc9af0f", "indicator--5956cddf-1cde-4100-8ae8-4159343a4dac", "indicator--99d9cef7-09bb-423d-8ea6-9d38aa97df09", "indicator--a8472e3a-97c3-4246-a535-57a45757a8b3", "indicator--52dc1390-6820-4e76-8063-a47ef3d46570", "indicator--084d2f93-5d40-4b50-8a4a-8d32498d48d9", "indicator--7b2c0734-1830-4527-af6f-9874f4e68f7f", "indicator--3fef5643-38a8-44c9-a32d-69ecd32a7f23", "indicator--a9eba6e3-8ca4-451e-b0d2-928c891d1e89", "indicator--4d716ae4-5272-4fa6-b224-128bfa8c564c", "indicator--51f8a060-5eeb-4b49-af13-7b935b18d413", "indicator--c461ce7f-32a0-432d-b625-9a0e6127a00d", "indicator--30d1c159-e754-49f3-a7d8-4a100bbc23c5", "indicator--7e528aba-d940-4fbf-b3bb-d53f19336840", "indicator--96ca541b-cb2d-4d61-b7d5-0b6453016c04", "indicator--d22fd72d-3181-4d26-83e9-7c20afc3225c", "indicator--d588444d-4875-4555-acec-4e274f94ed1f", "indicator--da011cf4-abe8-4495-83da-21fdbe3be754", "indicator--a0f3c44f-33a4-4f49-8586-f77c28426513", "indicator--c3d49115-3f1f-4dca-9d25-a1ffb87bc22b", "indicator--31bdbe22-0cb9-479c-b824-61c176555031", "indicator--b5461f16-982b-4bfd-b2ae-104ba28d9a84", "indicator--9990c769-fbbf-4eb6-8367-cc05ddad8f28", "indicator--454190f9-5402-45fb-822f-e22801abeb3f", "indicator--72491095-e34a-41d0-abc7-2c738a6dc7b3", "indicator--94950a8d-6867-4f64-8ef9-5e43f268169a", "indicator--7f0250b4-2dc7-4363-9bc9-c9653b2e7e34", "indicator--26be735e-140a-4eb9-a6a9-ac5adf3956ac", "indicator--0886d6cb-71e2-478a-bfcc-cf09d702bfc5", "indicator--1172dd0c-6eea-4cad-a90e-8b31579774ed", "indicator--cfff82b5-4aef-4d84-aae5-82d402f91fa2", "indicator--529be6df-af34-448f-a140-421b3f8a72d2", "indicator--fd1b174b-2e00-4302-8bca-facccd14601d", "indicator--ead162c7-3c6d-4620-8daa-688ffb3b9725", "indicator--fce05541-98c7-4dde-985b-890264fcb71a", "indicator--2d3a9ef6-d6e7-428c-a021-7cf66458b0a6", "indicator--13c67fe2-61b3-427c-a6f7-599f444ecbff", "indicator--0d899c8d-fb16-47a8-bfe1-bbb87bf6cd14", "indicator--e19c8606-3fd4-47d0-8f4b-dca67dfd5713", "indicator--4b520a8a-c790-49ba-bcd3-a1660770c50f", "indicator--19984488-8d99-443a-ad8b-398913015641", "indicator--cb0c3f17-b0c4-4b96-8b75-6d8fb96cfcad", "indicator--400784bd-9a97-4710-93e4-5bc7ece57420", "indicator--94868971-de9b-40fe-a3de-c30db1b6d0f7", "indicator--f111ae6a-e821-484b-bdf2-002f43ef660a", "indicator--d3d1fb30-2d5b-42e8-8733-977620beba41", "indicator--5c2c7d7b-99f3-4d5d-954a-3a892c35e14e", "indicator--b97a6fd1-021a-4d90-bcdd-4d972a18eea8", "indicator--64879a6d-cbb0-4e2a-9a81-730cf031860b", "indicator--810b397d-3c41-4fc1-b327-4a64b7aff88e", "indicator--3291848b-dfae-4c2e-adf8-35890635d292", "indicator--92c3e8e2-88bc-4624-8ffb-4c9130e8c3aa", "indicator--cd07993d-da6a-46d4-9f7d-223237e41a81", "indicator--2b901adf-5769-4397-a1f9-2a7455fe19f6", "indicator--15957990-b1b7-4bda-80a8-f3eebef98664", "indicator--248cd1ff-816e-4937-a60f-4c449599a00a", "indicator--990f6057-6262-4c5b-84ac-95aa795ed0f7", "indicator--c23393b2-2495-4466-ab89-445f01e9d479", "indicator--719f9bbe-78c5-464b-86fa-512efa7dca4f", "indicator--5f6e675c-4777-40f4-be80-0db4aadb5474", "indicator--1838ffd6-e67c-4401-bc81-c59f927bdc4d", "indicator--9fbdca2f-3b77-4bd2-8aa9-9beff21d9127", "indicator--8baa585b-9aa2-422f-9d31-a2d84e686bb8", "indicator--8ee272bf-4f0b-424f-8e06-e106648b494c", "indicator--389df237-40dc-4684-9456-71e87cd50eb1", "indicator--0e567ac4-5f18-4b98-8d88-85db6dbdf4e9", "indicator--b715a59a-1e50-49cb-be07-d2d78ec87ee0", "indicator--c04827c4-9467-4348-999d-ee3ca3ad021a", "indicator--b5d36e77-a833-4519-b2aa-da07bde099f5", "indicator--07fa7a9e-cc5b-4f6f-bcbb-bfb908bb9b7f", "indicator--4eefc0b3-f9e7-4fe0-9b53-3bf156f4a4b4", "indicator--5ad6115d-06c3-4b85-885b-3fd4d07f8bce", "indicator--1d087e35-db6f-4624-a732-e59147f008e7", "indicator--e283893c-423f-4207-a641-c1450cb47f58", "indicator--0c943ac5-f047-4a86-81e9-978b09135660", "indicator--8699f45a-b980-4bac-8539-5c9a5c3fc731", "indicator--a86c7ed1-2135-48c1-adf1-228042c9139b", "indicator--a8360396-0c2d-4357-86c3-8fcd971df1c3", "indicator--dc2ac4eb-3fa8-4884-8a43-6c84229b7cfc", "indicator--b2df72ff-9379-4db7-95a0-7de72bde36b5", "indicator--0468c7e2-648f-422a-a0e5-41f96b7c2145", "indicator--cff93adc-4afc-472a-86aa-37a3fca3f993", "indicator--f968f840-70f0-49c3-a2a7-b87732dfb915", "indicator--1018710e-d7f0-4b62-b990-11a9747a9c98", "indicator--ccea6e5d-450d-4865-b22c-df22db06d5b4", "indicator--d6388b15-a05a-47b6-af12-4d403c1c1a27", "indicator--cf4c6056-7919-47d8-a0cf-4636dc0ea616", "indicator--9cbfd294-3574-403a-a7e0-12de7a07ac97", "indicator--a1d8cacd-d84b-4786-b98d-da229f6fcc21", "indicator--a77507a8-fb25-4937-bebb-5ff635fc89b6", "indicator--e5059209-a0b0-4812-af09-cfa6a73d64a3", "indicator--16446ca0-c05f-43bd-a947-c53dd65d1512", "indicator--0c1fd858-912a-484b-9bd0-8c74fa2bc86d", "indicator--56faffd4-3bec-40ba-8ef1-91f789b692ca", "indicator--8f6c1bd4-8b5a-4374-910c-c213b3d84040", "indicator--661a5642-9293-4627-af69-5308a21095bf", "indicator--818a0b04-7a8d-467c-9ed8-91dd5daed02b", "indicator--9a9176bd-082d-401f-b342-e24e370332ec", "indicator--bf3e22e0-74f1-4e34-bb59-1bf02784b7a7", "indicator--3f8ec1c2-f1e3-409b-8e3f-ddb21eccdf9c", "indicator--ce93b96d-e420-4caf-9b4e-ea7e7ff9135d", "indicator--15a2989e-c219-46b0-a3bc-02f4ab347e85", "indicator--ed22ed51-b8a7-45b0-8186-47d0557ba50a", "indicator--eb02925a-7990-47b8-84dd-a3079ff70697", "indicator--e4b0111b-8b36-49fe-86a7-13849fda9f28", "indicator--b5fe4bf1-b030-49a4-ab28-4360164eaf74", "indicator--870bf979-62f0-406f-ac76-12758d02cd21", "indicator--371f5ea9-a793-4d37-9f05-d92caa42457d", "indicator--ad1a25b9-0a50-4864-9ea5-0253b1886067", "indicator--1f779d4e-2a32-4230-92b7-9ae0ed610717", "indicator--087a4265-5610-4df8-9445-f7fe105cdb77", "indicator--f2778818-bc37-45b7-9443-6fbc5405c5a7", "indicator--338b82f0-250a-4f51-a066-5af629709d20", "indicator--a9c98534-d484-434f-9e7d-4004d90e1943", "relationship--69930abc-b193-4b22-91c0-af1dca2936a6", "relationship--0da8a247-1913-4ed3-907c-3869a54b8a07", "relationship--8de2af2f-f608-4c16-ac6d-29d0c34e54e4", "relationship--6b69aef2-cab7-40ff-a44b-d019204088f0", "indicator--be46a938-6032-4705-a49b-51e0ac084ee4", "indicator--633ed05b-330e-4fb9-851f-0f62d881c38b", "indicator--1e45de7e-9cf0-4b4c-9350-ad7a7155b56f", "indicator--97bda627-70e6-4cf2-9c6e-3019d814b0fd", "relationship--9d607610-20a8-4f2b-aa5a-593cf4788665", "relationship--301a7c32-664a-4929-8094-7ea069191082", "relationship--aefe9eb0-0758-4ab1-8383-63fb9f52d7bc", "relationship--0fac3951-40be-4820-b521-87565758a6b3", "relationship--55fb2427-bfac-498b-9c35-a0b1ebced0db", "indicator--edce2503-0968-490f-8bd4-62c4328414d4", "indicator--084dff9f-3705-4344-906a-2f286e2da39e", "indicator--8eab1e95-9d87-4bbc-a868-1ecf28f0648e", "indicator--1a22ec05-af47-4bfd-a61a-4eef2e974fe4", "indicator--8342c169-e00c-402d-982f-45ed4178397c", "indicator--c3cfe0a6-ef27-4b8a-b9c8-e8b17c0c090c", "indicator--b916ec90-3042-4656-aaf9-e55d75a24d46", "indicator--a99f1955-b547-45ed-b487-0877d806c713", "indicator--fe900c6d-5674-4b37-bf69-56f77b77b985", "indicator--fcf33eba-9809-4a1d-a085-6bf9ff31579a", "indicator--6187189a-1b6c-482f-a40f-ae1e929a2487", "indicator--dcf82923-051b-462b-8f07-749f205426a9", "indicator--51ca241d-44fb-4931-89ea-2c9537dac8cd", "indicator--5fd904a3-331d-4458-adb0-d6ee035ca540", "indicator--9e3daad2-7643-446f-9520-508b3eb289cd", "indicator--910f1ec2-255f-43d0-b6ee-e26e9ec8968d", "indicator--4f0e84a1-3e5f-4fee-a910-4b84e35bf70a", "indicator--11b3ceec-2433-452d-83d6-b2b82b132b08", "indicator--6efdc4c0-f138-4dc5-9486-c42a29a02293", "indicator--57098e40-976c-45ff-85a5-ea24b02370a0", "indicator--40dbe1f6-5c54-48c0-9334-5e2716aed316", "indicator--51b08277-d8cc-4a27-b63d-1cd80672bb42", "indicator--1372e1b8-56bb-4b4d-bdf9-af4b97374376", "indicator--963f2c87-51bd-434b-a069-ebd45f9f9c75", "indicator--e3bccf68-2c14-4810-8432-697fc267ff55", "indicator--08a46e80-915b-4292-9f4c-1ca4f8b32574", "indicator--592bd05a-9822-481c-9af9-050a3caa69bf", "indicator--427478f9-a0a2-4c04-a25c-5a0f40aaa0b3", "indicator--5fbe0c39-d673-4179-9b60-a5eb98da03da", "indicator--099c4ade-1f35-45f9-b456-44e52113f47b", "indicator--271a2afc-863b-41b5-969a-662c7b8bee74", "indicator--ed1885bb-1425-4290-b07c-80a7feb6c3bf", "indicator--1ec78234-ea19-4cec-bf75-0b907059e35e", "indicator--4246118f-6b64-4d37-b8c9-d8bdf4f4f8cb", "indicator--8cf8f6e9-1bc1-4ae7-9a61-8b0609e31676", "indicator--15f814c0-5f5c-489d-9acb-fa00300664d8", "indicator--e2fac401-1a6b-4961-bae6-7fd977ee643c", "indicator--bdf11deb-8ffa-4170-aeeb-b1fec0ff0a8b", "indicator--bf7b9c42-b7a4-42f2-b295-f8bae1f96513", "indicator--55838749-335f-4d76-bad4-88cfe7442d8c", "indicator--651fa742-7a00-4c95-8e46-65661038e65d", "indicator--df436d65-9e01-4e2c-89ac-5673e89b3608", "indicator--7f2cd049-e7d9-4a53-8018-12949f0d2d81", "indicator--5e21fe4c-f62b-469c-a8b0-38ac21a8bc5c", "indicator--2a400e27-85a5-4784-ad7a-3fcc9a65a299", "indicator--91893f96-ee3f-4fe3-8564-885e67ca57b7", "indicator--bd7e58c9-a7f4-438d-85cb-815f5a567257", "indicator--44f626a7-869a-4184-a220-83882abe4695", "indicator--9924071c-8f91-4520-b0b7-8bea2aeca90e", "indicator--6d4a825e-ed14-438c-a093-706f9e7eaaa3", "indicator--f07f1ee8-a4f7-4a77-9bba-302f1be3b482", "indicator--9e765824-cbd0-47c9-a560-0cdd9aec304e", "indicator--8cf12e79-8b31-46b7-8f5d-f01c7a7e31ba", "indicator--6cbe822c-3aea-4657-980a-380a9ec7cf1f", "indicator--4d6bd1f3-4876-4a87-8f63-d5b107d531ea", "indicator--fa87308d-686a-41f8-9053-0dc906980b19", "indicator--834aa40f-dc69-4c01-b52a-f085a3d2e85c", "indicator--312f794e-c484-4a8d-a13f-b87f1a551a17", "indicator--f4a1fd84-0470-403c-83d9-a949ed4fba92", "indicator--1a424a0e-8938-46a2-b812-d2f59285e80e", "indicator--157a3118-54f0-4026-bb42-ed8c84762793", "indicator--b32fcb4a-29ff-4569-9b52-be7afa85582c", "indicator--0dac48d7-253c-4a3e-ad8e-23b31f44e6c1", "indicator--6596286f-6150-48dd-837f-630550a8d6bf", "indicator--cf8e0c48-db8a-4c14-88fe-df12771f6aa7", "indicator--4294b089-52b6-4874-959a-d9a28ceddead", "indicator--6c52bf53-8aad-4091-a1eb-044a56521d4c", "indicator--5bbb9572-da20-4bde-9161-93c80c982f25", "indicator--ae2878e9-6578-4ffa-94db-e625d6e28b65", "indicator--4c06f009-7045-4078-8601-72f847283b6a", "indicator--c24ba0d3-d463-41b8-b9ae-5a7ee84567de", "indicator--e6669a9c-b285-4bb5-aed3-a0b26c31ef22", "indicator--8cbe0c75-abce-4125-b6be-e7f2d80e395c", "indicator--a6ada130-f368-46cd-a6db-12942d113cef", "indicator--a43c2cc7-0a69-47ed-90a3-2c02463c7777", "indicator--b9dfe81f-c820-4c40-a916-568b0e6ab149", "indicator--416bdd24-1612-4ff3-a203-e17e5439d376", "indicator--faae18eb-47ae-46f2-a6cb-30dad20d8e8e", "indicator--4f01e909-f718-4695-9d21-8b4a44d33a96", "indicator--faef603f-49ee-4eeb-ad5d-8a93dd2570e4", "indicator--02fa9af5-ec34-4bfd-ac9b-70be154a1912", "indicator--0260677c-fdbd-4c1a-aea1-937ec3f6b07c", "indicator--4cdb3d4c-4d47-4e4f-baf6-a46a27a31948", "indicator--fa36bc58-830c-4a65-815c-36cd0540087a", "indicator--2a4f623b-15a0-4685-82f8-95a2b2935f7b", "indicator--9c7edb4e-ca85-4d66-af12-dde6fc8e27e8", "indicator--8062a73d-16a9-467c-ad72-2926ff5e0062", "indicator--2e80c4a3-90e7-4a8d-84d9-5b89695a4dab", "indicator--c8c430b7-9f16-4c36-a48e-cf5d8d335f67", "indicator--8aa3b905-5f95-4b3f-8894-b6ca1549bd7c", "indicator--e2870a12-37a5-47cc-b61c-5a562a7716f4", "indicator--b5abcc50-60db-414e-a5c1-aca9a4ab485f", "indicator--32db010a-8794-48f9-8bea-06733e434ff7", "indicator--59ae7e88-a5c1-42ce-bb98-8cc1c57b1fb3", "indicator--75870363-be9a-405e-9067-b9c5118cd12b", "indicator--05c3bdcd-1860-44d4-b5cf-c4792310b7eb", "indicator--a96fc882-2011-4f0d-9102-79a24c8b9761", "indicator--fa2e8acd-be29-4c33-99b2-080dd332d9a9", "indicator--2924f7ea-4d8c-4171-bf33-20f75778844f", "indicator--e2c7223f-d8cf-46ac-b6cb-f9d2dd196f5b", "indicator--5ea63717-1892-47a3-a7e7-95c435d21545", "indicator--f657351a-8411-4a0e-8fc7-351d37ad8ae6", "indicator--f48ec8a3-e185-48b6-86bf-9b08f6a3bf64", "indicator--cb03b049-6c3c-485c-b74c-6b47ff3c92cb", "indicator--9e6f1446-9357-4517-98a4-0d8c85c836e7", "indicator--fbc06b66-5581-4a9c-828c-4cd1f8991b7b", "indicator--3cbc2c9d-4398-4ba9-83e9-aa326e2c0051", "indicator--b16ef03c-77c2-467e-8112-d3612070c76f", "indicator--b0917a68-1d6c-470a-b226-ad188b8aa850", "indicator--c647aced-2b65-44ee-a680-5a58dd95c782", "indicator--4889dfb4-26e8-4122-a5c0-6fceacfd981d", "indicator--b472069e-96e6-4cef-bbb5-f8c97b98a9ee", "indicator--6c31ffea-18e7-4c21-bf8a-524ca1860d0d", "indicator--ae4b1427-9e0c-4f05-836a-3c14f3a047a4", "indicator--f5b7e5ad-ba8d-489b-8553-542c23a12755", "indicator--a311c9b5-be63-4137-9318-2d0ef7ed6f42", "indicator--e96b9ec7-a85e-4516-b07b-c468bb881952", "indicator--b5b717ed-391d-462d-a082-c9e60c87816f", "indicator--64daabd5-a6c6-41ab-ba18-9af9443ee985", "indicator--d5785315-d9c6-413b-8154-b185f439396b", "indicator--091737f7-faae-4d0a-9a06-4bda9d672c47", "indicator--d9763afa-c3f5-4f55-9660-2bcd49e66d55", "indicator--ec139ccd-4a6b-4bac-ade0-dcef4030f9c8", "indicator--e0de3fcb-935f-4868-a5f5-0e302ea36e86", "indicator--2718c82e-0b52-462b-abe6-020255f7f0b5", "indicator--48d82954-8d99-4ab7-9864-b9f868aaab62", "indicator--27e269ad-3c39-41be-b5e1-50fa268adb81", "indicator--42d917cc-37d3-48ae-979d-c0f5deb3f351", "indicator--f91ac9e6-a2db-4318-af3d-d36580d89dba", "indicator--e8d1b003-480a-4c85-b776-9bd6454c4535", "indicator--1744b95e-eb81-453b-b233-aaa249769b84", "indicator--eb7c1fec-fe87-47d4-98b3-2dd0308d0e74", "indicator--a9407f79-9a70-4100-ab3a-e82b8e4c3c9b", "indicator--3d6c9048-fc37-45d0-a7e3-33e359451478", "indicator--0f34fcbb-a082-46dc-98b3-05680d5997c2", "indicator--383ac164-d7c9-40a4-95d3-612b6d7ef316", "relationship--f767c2fb-24a8-43fc-9ad6-3a121995a7f0", "indicator--5a505056-f988-4de9-9028-a3d2aa45b6a4", "indicator--096b617f-cf50-4c95-aad9-2d676e81a37e", "indicator--7bbe2428-e4aa-4dd8-925e-eff8fcbcad42", "indicator--aca4f231-03cc-405d-af95-0d884d87c3be", "indicator--42cfe00d-b964-4822-b133-35235ae8e14f", "indicator--641173c0-4156-4a8d-8165-9a2809cbaec4", "indicator--0f45d0d9-2edf-4eab-a326-05086ebc240f", "indicator--8647caca-7ed8-4b3c-b125-de692f01c671", "indicator--a4751e00-61dc-4f9f-bb3f-b4646b5d7deb", "indicator--e43f1010-42ba-4482-9c71-7564d5c7a59f", "indicator--74f165eb-75aa-4263-983f-c84f96ae9611", "indicator--5491fb8b-4452-4884-a9d2-141be3d40950", "indicator--6077a79c-f3ad-42ae-9669-63193f4f4fc3", "indicator--8e549730-469a-47c0-be19-a23ab7327011", "indicator--b3530eb8-1326-4349-adae-92fab621fa13", "indicator--f34b3dde-f1dc-4611-bef5-5b899aef3728", "indicator--d3ad37e0-a298-4082-aa09-d62678c73092", "indicator--01e1c09c-e82f-4575-a189-1d8817581b85", "indicator--74bf96bd-4062-498e-9cdd-4ad59ef95d55", "indicator--953fa284-c901-40a8-ac2d-5ee413815b94", "indicator--99dcb6ea-7145-470b-b3b5-fd74d3a82be0", "indicator--6d373567-0ee5-4654-99f2-a7988e6cdfa5", "indicator--d5551daf-9d7a-412e-a770-046611af9820", "indicator--1898d972-fe0d-4851-b964-d7876f6ee4e5", "indicator--fd5091e1-e85e-418e-be25-efca54bcdfd1", "indicator--5d566e1a-128d-4074-bf46-d9f3e05b264c", "indicator--8b317fb0-fe4d-4832-ac8a-9246b26713f2", "indicator--95410f17-5418-4930-b744-8bf07357f3a6", "indicator--36511c06-7775-4f02-a525-c8e8cc117561", "indicator--2c72de16-d9d4-47a3-afc8-dc6777eb3c19", "indicator--de5e4060-37b3-4af2-8e43-22a471a78dce", "indicator--46b4a54d-8be5-4177-b743-698c53fc2d52", "indicator--b7d80ff1-0e19-4c83-bcc2-f8e13b0573df", "indicator--af5e347e-6401-4141-95d8-b2628d7d8c4c", "indicator--7d348426-d164-46c2-9623-1395f7770df6", "indicator--e90e78a4-0216-4b52-a7ec-1a21ec6d5b81", "indicator--520b76c6-6cf5-490e-8ecc-c212dd0aaaf0", "indicator--5a1df94c-64f5-450b-a166-7937a3eaad6e", "indicator--ec10335a-8f13-4f46-a4ba-9d13eef847da", "indicator--148bf5ae-6bfd-4a23-9b38-671d307e69e4", "indicator--73d4e01c-0781-4a68-9152-11a8bf97e8b6", "indicator--732cb9b8-a044-4d46-a9b4-3de24ea7cb4e", "indicator--33193ea1-49e7-40fe-a2f5-99e219aecec0", "indicator--7c423dfb-52ae-4277-92fa-dfe5a0b09601", "indicator--a82c697c-44cf-43cd-becd-ea832a1ea4f7", "indicator--f7d0e7e5-5b10-4429-b84c-bfcf01e3e1a5", "indicator--0a06571d-c1f8-4b81-bad1-20175d030e3f", "indicator--b3c822f3-ef8e-4423-b2d4-f77ca07c45ab", "indicator--c60cfa00-803f-46ae-bce0-dca2bf1d0d9c", "indicator--44e29043-bd90-4b12-a842-e3fe076bdd9c", "indicator--ed3e5474-63f4-4634-8232-e10243dc2873", "indicator--07b6f372-4977-4d37-b7f4-e3f09a0720f7", "indicator--1f5bf499-9cb9-4616-898c-5ca45fcf207d", "indicator--20092475-6b10-460d-bb83-7bd81cf0b047", "indicator--b6c7199e-ed17-4939-a860-7f8d5159b5f2", "indicator--b691f004-dcbb-47a4-bd0c-a2c58cf69f11", "indicator--39640c64-7f9d-4c88-96ea-10095f13f4ef", "indicator--53e69355-b824-430d-9e66-6381ec1ed3d8", "indicator--9a559f43-9eb8-480d-a805-6b4590e0e58a", "indicator--fd1c28e3-0705-4d43-bcd2-e82fc959d93c", "indicator--803cc831-3666-4fa6-a5e7-e827c1b75947", "indicator--c3d121f4-2fd7-4b0c-a6f6-6a704b2dd763", "indicator--488a74cf-f144-43a1-b9c5-787b84c1612b", "indicator--7d04642a-5984-4d14-bcfd-4631525b012a", "indicator--183641e5-7b9c-426d-996b-e017aee1b712", "indicator--f4fc0d78-33eb-43b1-b647-1612b81ea9b2", "indicator--f32a970d-7cfe-4c5b-a168-5d3bf2792631", "indicator--3a872345-1595-4a36-a91b-c0eeae65d6e4", "indicator--64618e85-3f22-4670-979c-b482203f5425", "indicator--4457ff0f-5a9f-4a7e-8407-c36834bb56bc", "indicator--73b3accb-92c8-47a8-94f3-81e0ae9ab24f", "indicator--9f5918ed-b3fd-4f06-beb0-c7e7f91b351f", "indicator--1b49ddd2-310e-47d1-af45-7c9ee43c89a2", "indicator--f4bb74be-2aa9-4b0c-bb72-f94039866a5d", "indicator--823b1b7d-4a82-4e33-977a-1825de7602b6", "indicator--fabb5044-6a46-4c01-b6b4-fb3b960abd19", "indicator--48349271-3bab-40c8-8120-9372a309bbf8", "indicator--35628704-1695-4955-95c6-7de5f00cf7a8", "indicator--d8e57477-7468-4365-af16-8224742f4996", "indicator--10ca3f53-bcc9-440b-b025-ff2eebf8ea74", "indicator--868a6f4a-40dd-49bb-a8a2-279526bee2de", "indicator--e2bfc4a5-79cd-412c-90d4-4a5404ae5165", "indicator--ef1f6a75-026e-4788-8b9d-739737947e44", "indicator--0e8769cc-bc67-4247-b4c5-24a60a27a5f2", "indicator--c88bfa99-c9fa-4dc3-9cc8-b2e99a9598b3", "indicator--91ffa2bb-30c4-47a1-b8a8-a4fa610fa193", "indicator--9b7b980c-e816-41e0-b132-dfcec46dfe66", "indicator--582e7a06-cfee-43aa-b194-f8ad2050dcc4", "indicator--01500acc-0bcc-4f1e-9e7f-dfa57fcf32a8", "indicator--84be90d3-4bbe-4cbc-9457-690128574e7b", "indicator--b488b574-f67b-43df-aa83-87ca606787bc", "indicator--9526bd24-b551-4416-9045-920e909ad36c", "indicator--42d59d7f-3a2f-4055-953c-958b5cbfd38b", "indicator--f1daedf6-2a81-4264-9c0a-7fd32416fc27", "indicator--f779236a-17e8-4707-b64d-08eda9c8c4ec", "indicator--88749efc-463b-4018-a051-c7733033c093", "indicator--5b387c2e-e89a-4c74-852e-2f29e78c3132", "indicator--a9ea02a6-13d0-4809-ba91-8d4d67921f01", "indicator--fb8c7661-107b-4e92-8305-7dde89e7345e", "indicator--ee5aadb8-6bc9-4cf1-8776-d1ceb2ef81e0", "indicator--b453d676-8784-4249-950d-729a1d395098", "indicator--fe681497-de41-4a55-b3ea-4710328542e5", "indicator--e7e8d3ea-a788-4f11-ac1f-f55a606101d3", "indicator--3b6dae98-8f40-45ad-ac72-5e9d618a3cf4", "indicator--6ae84526-c9ac-4a26-8421-0fc88ad24d03", "indicator--acbedf5f-1d29-4518-9fa9-aad121627ed6", "indicator--c9dfb941-4d6e-41ad-8c52-25d78141345d", "indicator--6d9280b6-977f-439f-b49b-30888c0dee44", "indicator--7a40f4f1-4cba-4684-85b0-13c39cb4f0d6", "indicator--757d632c-dc6c-41db-a922-66ecf9b0acb9", "indicator--3ac4129e-7a97-4c39-87e9-585226242c9e", "indicator--098351b5-b268-4b23-ae85-9036d667d321", "indicator--e67cce88-5744-45db-aa5b-ef71097efcee", "indicator--ed312d4b-ed37-4be2-991e-d6d1cc391e6e", "indicator--8d1a7d5f-4da6-4f73-b82b-2048e44c90fa", "indicator--c796895f-63bf-48e6-a207-6cd65c81ac07", "indicator--a3cd53c2-3966-4607-a005-21dcebc936ae", "indicator--bb6e9901-5f5b-472f-9e2e-31d419aadfe5", "indicator--ec7cf2c3-e75f-4dc0-8d91-d6d299dc69cc", "indicator--0b0845f2-e874-429a-b382-e80cab7136f4", "indicator--bd7f5f59-61c0-48f8-a0f0-c9873c33030e", "indicator--728f1cf5-6a1a-4e90-8af8-67c0b288f611", "indicator--1da186a3-b81a-4664-9757-a39ff11ec2ba", "indicator--e004c5da-1eeb-4595-bb53-fe459bfbd669", "indicator--59514176-9fbe-498f-a801-310ebd47dbc6", "indicator--c3f64c33-6000-4e5a-9ac8-7a273cca5973", "indicator--1c8bf0a7-bdbe-4793-9a56-7f43eabc8575", "indicator--4fe6c1d8-5468-4ae3-ba26-71a050479763", "indicator--f8e315b3-7b2f-43de-a7d2-b80e7620e27f", "indicator--a53f32fa-780c-4a17-893b-7ef80bc7f252", "indicator--ca06437a-bf44-4925-989f-d39d47f6aa45", "indicator--7ecd406a-4eaa-48aa-acf0-899d7d41e546", "indicator--58190211-8d5b-4036-8116-614328938882", "indicator--058d722a-55c5-47a8-a6b3-8cbd4e56790e", "indicator--8139a54a-7032-45aa-a424-5f96f65dd975", "indicator--7277eb1c-3759-4a51-a5a9-c229ff1dae67", "indicator--b4e935cc-f94c-4662-abf5-4de3fe68a85a", "indicator--5ed7b67c-7e2c-44d1-986a-3c058815f947", "indicator--2e368792-384b-4eff-8458-6ef2fd3ffb97", "indicator--37161844-7eea-4e25-8634-20e7e92952b7", "indicator--11edd366-953d-41c6-9fa7-224e38afe574", "indicator--e2e29f5b-485d-4212-8fe2-56619ffa9c6f", "indicator--631ca984-3418-45f1-8934-978031a9f273", "indicator--3aeea623-8997-40c5-8a36-7b8c1c51e4b1", "indicator--e4128e40-2a0d-4ca0-b7cc-3578f039397d", "indicator--2fdb3354-5af2-4bcc-adc6-223cd3c1fb0b", "indicator--44ef62ae-1afb-4394-b770-a692b6fe4d63", "indicator--09cdfe12-d885-414d-9f89-518419188e17", "indicator--bdc6b8c5-187a-4de2-b7c1-b20f9d9716cf", "indicator--83718c02-6590-488f-a07e-324ed59429d1", "indicator--05c6bbb7-0a6a-4f84-8b0d-6426e401307f", "indicator--ef16bd6a-0f3d-4fdc-aa49-df99df6f0a5f", "indicator--92c90d1f-64b7-4845-8b3e-19f4ef75a3f4", "indicator--dfb7f21f-b959-4cd6-8a20-cccf77fcb656", "indicator--ac232f5d-6e04-436e-97e5-4398b8676a24", "indicator--5aad2b84-4af5-4a2f-89cc-be70dc95b9bf", "indicator--f2e03d92-58cd-4f64-a1db-12e1a055110e", "indicator--3a4f2d04-c240-4b17-86d1-5c845b2506b4", "indicator--01a23f2d-bc17-4c1a-b587-022d2c8d2754", "indicator--31364df2-815b-4f80-9260-efae7f1f7da1", "indicator--801ca184-a2f5-4923-8e76-5f9b1060167a", "indicator--dee9bd37-98eb-40e8-8c6a-e1860f0ec5d9", "indicator--4b0e0fb2-a4ac-4005-98e1-3ad61fcf97b4", "indicator--de60b979-d295-4bee-9140-ee89ffe39f43", "indicator--8318dbb0-345c-4c53-9610-bc92ba270eb0", "indicator--581d93e9-ae4e-4c07-8d8d-e484e835af92", "indicator--3ffd5ba9-5b93-42a0-b285-c49fb2bb62f0", "indicator--0cf6afd3-fd06-4349-a2d5-5b775da2a2de", "indicator--0edf2b6f-7d7c-4cf2-9488-ec917bd17c22", "indicator--9d1cdd56-a082-467b-8f75-5efba6dd760d", "indicator--0866b55f-8c02-4708-b94a-e43f0b5846da", "indicator--3f5bd499-24e5-4f86-897e-dc86cde7d6e5", "indicator--8a00ec6f-b302-4ff4-bb09-9355dad78492", "indicator--e0524f54-9c95-461d-b23f-4eee7b4d55bb", "indicator--a32ddb99-f5ee-4b98-bfa0-33c747ff2e74", "indicator--21829f40-16d6-4bc4-a537-2df5173711d6", "indicator--89694f9e-d0ea-468e-837c-c8adbd54b6b2", "indicator--d2ad9c38-36d7-4d9b-b40c-e325e8c60bce", "indicator--fe0a4b81-0b60-42ab-8c86-2bd5a4520ada", "indicator--799e769f-90cd-4a11-8f55-58f22af11d5f", "indicator--409dca46-a201-4e2d-b8ff-6a0f743e71d0", "indicator--5476bcf4-bbab-4828-8870-aab98e12e22c", "indicator--69777049-b6b8-473c-99bf-11bdd752a81d", "indicator--7dedf7aa-35fd-46ab-bae2-66ce8001d083", "indicator--da283a7c-c27a-4bf8-b651-701b858dce73", "indicator--aba6487c-049d-4833-b0a2-c854e0421122", "indicator--76dd68e2-50d7-4d68-9a28-67441ed18d74", "indicator--7dc69434-b4ca-41e0-bdf8-8a392ce7c1a3", "indicator--b651ec65-dd1c-4a08-849c-2ec17332e095", "indicator--4a2de7ff-57f4-4d66-9eb3-00519f5989f9", "indicator--1ed98d2b-7e36-4d5f-b7a1-332830252515", "indicator--62daa07b-0f61-4baa-a8d0-5aa7ffa65992", "indicator--eb1a7e75-6f62-44de-ac55-23298f52f950", "indicator--e96012c2-60f5-4c8e-acde-c26901312f96", "indicator--53941dfb-5f5c-437f-a31b-f9a49aa32cdc", "indicator--3e3d0919-3c9a-4547-ae9e-e194fd1702c7", "indicator--aed4a9e1-0f46-462a-b736-9417d2230c69", "indicator--cceb1cef-5cfd-4e99-818e-14491f68ca38", "indicator--62fc0523-dc37-458e-b4b5-6b9347f234b7", "indicator--765eb42b-4de3-4ad7-b4b8-448e5a20a782", "indicator--c2d74678-634a-418e-a25e-36d4177d480d", "indicator--4601c86d-3b15-46f4-b3bc-d06610a8e8d3", "indicator--0ec14cab-359a-47c8-87dc-4fd3cdebabfa", "indicator--5a1ed116-0b4d-4d0f-b8df-f7e4d5a45ecd", "indicator--b0ec6c4e-f1d3-46e9-bcf6-b3a95b806140", "indicator--93c6863d-bd77-4e4c-bc26-6c54734b370d", "indicator--7b5a36a8-8bf0-491d-9162-c02b9b5d7b8b", "indicator--72d337af-d69e-4bf8-84fb-2fb12567c17c", "indicator--aee25ff1-ab78-455e-9b33-e239de8fbbd6", "indicator--62a7313f-8d01-44bf-8c37-45094250dd5b", "indicator--bbdd3eba-73dc-40ac-9c78-d3790ed5ee63", "indicator--25457897-a5ff-4678-b597-c3bf6a6ba2eb", "indicator--05fde2dd-753b-4f91-8c41-8d20a2d74c57", "indicator--d382ea40-a29d-42eb-a8c3-4ec174aeda94", "indicator--033fc943-ba44-48c9-926e-2dbc81d6e743", "indicator--41060982-35bd-4906-85ca-a2d06c347a29", "indicator--71ff637d-be1d-4dc0-99d6-20ee42409fff", "indicator--0b9f3cb6-3abc-4ee2-9371-88718821a237", "indicator--7d2a8e7b-991c-4a71-9aed-cc815065f986", "indicator--6efca039-d84d-40af-b584-e6568aea08ec", "indicator--633122b3-b192-49f0-9394-8d8fb8cf32d3", "indicator--01631692-c1e4-4bc8-852a-ee214e7d22be", "indicator--09666b19-8f3c-4067-aa33-8bcac396020e", "indicator--859f611a-f546-44b8-893c-250effd258e7", "indicator--80711c67-81e6-4fb3-9b39-ebd69f932475", "indicator--f33bfa1f-d919-4be0-97dc-80eb6e09e957", "indicator--c971b8eb-0a83-4262-a88e-32bd152a4118", "indicator--6b336ffe-6f91-429c-9a12-7440adad639d", "indicator--4d386009-d0c2-4968-830b-085d3d1cfbbb", "indicator--b0787589-701e-44d8-a365-03786ac9190b", "indicator--5544eadc-774a-4277-be69-83e3be26f228", "indicator--cd65c800-7674-4e22-9f20-6f8ed7569d5d", "indicator--35c04ea2-8133-4d14-8e16-096c8369b1be", "indicator--e9be8ca5-0b9c-4666-925e-10166da194bc", "indicator--77b737af-391e-44a2-87f7-20ad7e1f2598", "indicator--2172717b-c1b5-4398-9b80-fbf728a417f4", "indicator--58839392-3290-4681-9a9b-3253ff4b4cae", "indicator--34eb30e9-52a0-463f-8ffd-f62f740702b6", "indicator--00c655a1-60e9-417a-9678-20cc6722ceb9", "indicator--85341f97-aee2-4518-b94d-950280d4b953", "indicator--4fe3bc3e-55f3-4831-b7a8-46e598462bf2", "indicator--d09e44e7-8875-4966-a1fa-51fd98fcecb4", "indicator--e2ad9034-8852-4a92-9e00-f129a7db68cd", "indicator--504357e4-798b-43d0-b725-96afd4e66a92", "indicator--122e575e-eeec-4ffa-bed0-f104aace1608", "indicator--4910d37e-bf2c-41c0-988b-12bcc2523cbc", "indicator--e4543e72-64a7-437f-8f2a-c1952c427125", "indicator--fe39ffe4-9c9d-41a0-8965-8286b3b902c7", "indicator--e3648ab7-3297-40a5-8efa-030ff27f1cf9", "indicator--81ddddc7-dcbe-4c6a-9b3c-5cec5a5676cc", "indicator--f5547103-1939-4895-8051-39ff475e9d61", "indicator--9f01af26-7831-4556-8134-376ab7bd77ba", "indicator--de4b4701-74a9-4514-9967-bdde6cf72022", "indicator--c764e2f8-8166-48c6-b443-71f2db4daed0", "indicator--1f525dc3-9e3a-49e9-ae3e-c5cff8a596e1", "indicator--f4b023fa-39aa-4998-accf-e267e7642904", "indicator--992f9a30-a2f9-4ce7-8d6c-ff3da3216645", "indicator--53a74ffc-6670-44bf-9509-7d977cacaecd", "indicator--a1daa60b-6a9a-4615-b3e3-5c3ca694b1e9", "indicator--17a4f52a-7ad5-4d9f-89ed-e7f56717c938", "indicator--7149bec5-5ef6-405c-9d16-4cb379135298", "indicator--fc5e3b56-c940-414d-ad84-59ad79834564", "indicator--a69c33fd-9926-41e2-893c-4973890830b2", "indicator--3cceb534-71d5-47b6-bee3-1bf706cfe406", "indicator--7dac87fe-a10f-4451-b7b8-ca216bcd9f33", "indicator--74f71da5-9edb-4a06-9435-b7aa93f17842", "indicator--2bba30dd-1a43-4631-b8f9-20b8fade2507", "indicator--1356131f-2c16-4fdb-8976-dcb286d85415", "indicator--4b397a37-f07d-446e-b493-754093d470d8", "indicator--d0b42255-8f8d-4b0d-838f-f0289ab64dbf", "indicator--cfa7e818-589b-4917-a0fb-accafade0ca4", "indicator--27cdac7b-bf43-484f-bd99-a0c97fecafa7", "relationship--4048da16-6c03-4dda-8e83-16d9512ab89f", "indicator--5094bf0a-0cb3-4473-8490-744388d3a0e4", "indicator--ce12efbb-b6f2-40ac-8255-e81f1a12b077", "indicator--de410881-b359-4849-8c82-9ba5d94424b3", "indicator--0337dd63-d2e8-4f65-bc67-3d560b0f9c80", "indicator--129edd80-e73f-49c5-90d4-4c984b9d01e4", "indicator--ff732e8e-1ddd-4c19-a73b-a5800c8a771a", "indicator--582d6a6b-ffe6-49f1-9b62-7a8111a9c92f", "indicator--d086e682-8d27-43b5-8b6c-21ac589c90d5", "indicator--0a93e341-b9b2-4b16-8c58-01fc5e993f21", "indicator--764330fe-309a-46c5-bcdd-53fe722a2701", "indicator--65bfbb88-e50f-4b0f-b1c7-93cb89054fe4", "indicator--37872435-4e57-47e8-81e7-bca8f8621ce5", "indicator--e2ca3eac-e02f-4d02-90a0-f8dc6c4506f0", "indicator--5850d2e3-489d-4ee4-9654-d5424de12461", "indicator--68152015-e258-472a-98bf-05ba22cef8e0", "indicator--03c4623c-0764-4524-9a39-c0dfe2137f55", "indicator--82999355-a4af-4688-830c-eb579b7e57f9", "indicator--dfce753b-57e6-4d13-9b93-5a6f22fded14", "indicator--9fedce02-b754-4dc0-9d69-88c8ba0e4054", "indicator--54376cb7-2573-463a-8a43-7942c18225dc", "indicator--8f686007-dc80-4376-8b3a-7776bdfb8c1d", "indicator--4e34d1ad-0d89-4131-8b48-935aad97f5ad", "indicator--e524c72d-0c3a-4bcd-869b-a43641643fe4", "indicator--9dbbb4a2-d22d-4e38-baa7-726cf5af9660", "indicator--71876170-093a-4779-ab3f-c74e6d92d29e", "indicator--4e4d3d56-9931-464a-8c80-7d732392a847", "indicator--ecd3df3b-c8fe-46a2-9dd1-cd9924e56afa", "indicator--d9ca9be2-b36c-4351-8d0f-530844f7fc7d", "indicator--caf9b407-a84a-4ba6-bba0-9adc555b6c93", "indicator--d3e50dfe-f661-4c5c-8ad4-2321e4478bdc", "indicator--65d82c76-bec2-49a5-8756-17fdbae41cd3", "indicator--f4e2572a-40c6-4ef7-98b3-f88ac27b60a6", "indicator--4a69ba22-81d4-48da-bb9b-cd6eea681279", "indicator--fcb25e0d-9d2d-4260-88a9-95720f5e6025", "indicator--5c8f1bec-91ca-4a9c-9ab4-91449dcbb785", "indicator--14292762-6fa7-4791-98d9-33a166d44db1", "indicator--0fe03518-70cf-435c-9a73-dbf1551e958a", "indicator--c3b2c0dc-bb0e-4eb6-8165-cfd3c04e9f99", "indicator--09fa8be6-d4b9-4efa-bc4e-64536bb30521", "indicator--7778a130-0179-4611-a035-8bbead2c5f85", "indicator--87432c2e-73bd-42ba-9ea4-07480cb26d0a", "indicator--59ce7628-4be4-41f2-9b3f-5ef92c5ad566", "indicator--5609a41a-0425-4bc8-8999-09460b485997", "indicator--c78db452-8f02-4e35-b675-aac216ee0981", "indicator--dafb0b1c-563a-436c-b20c-51367f1afd4d", "indicator--06720d2e-f439-4a05-b168-768c992127bf", "indicator--17906211-65e7-4d96-b7c1-ed9cdc8d2aa4", "indicator--91b61614-5c62-4e3d-90e5-4899d8ea020d", "indicator--23f71ba9-60bc-4e56-b1c5-3a0152cab142", "indicator--92e91188-70a4-4e76-9e94-55b3b8e650bf", "indicator--65fb39ef-da77-48db-8eae-db024afa2bf9", "indicator--9a23fa59-f83d-464d-bdfa-b2f1f1637a9d", "indicator--50a39745-11a5-4cfa-807e-0e7f51c4d4ba", "indicator--42ef903c-1428-47a8-9dab-6d97ff4d26bd", "indicator--a6e3f2f1-e57c-4113-b138-077bdee1231e", "indicator--18c19640-be9d-475d-ae92-67a3f866ea47", "indicator--396ef87d-99fc-4876-80ef-03c2762d6226", "indicator--7cef8b98-1262-4683-b4bb-4d141348f924", "indicator--33bc5831-7f92-4917-87ca-b6f64c515f06", "indicator--e73192e5-d79f-4d49-a8a4-298d102e367d", "indicator--9196cd8f-be99-445a-8024-189ddaa456f3", "indicator--d8e25b69-5d9b-459f-a5e5-b702b44e1d1e", "indicator--b8be1a23-b009-4b87-9f96-204b4e2dc73b", "indicator--c446ece5-c15c-4f5c-b5dc-ecf478a36b92", "indicator--04fffd23-ab25-46f0-9823-0cf9d101ba78", "indicator--a2b2325e-77a5-4ebd-ad1e-1953d1b97c60", "indicator--8451d490-9784-4679-a2d4-3f41313961c9", "indicator--d64106a3-9dfb-420b-84ee-3198eea9b32f", "indicator--9ef1bdaa-4af6-4759-ab7c-a3ff065b0058", "indicator--3a511317-3986-4912-9367-599b39fa5cf2", "indicator--d4b07f72-d039-416a-95af-c8b4e1946cbb", "indicator--054a01d8-8dc9-456d-b3c2-bbea68b52071", "indicator--e31ad713-6b52-44dc-ab16-4b8086d3a29c", "indicator--9a365e3a-a698-49a5-a8df-205df5330940", "indicator--14104bf2-54f8-4e57-9f16-c38e0c21a509", "indicator--9ea4722b-8b42-4e1e-92f1-ac96a606db03", "indicator--a68d493c-9e17-4455-8dc7-bb0f385433b3", "indicator--7567b732-f407-404d-acbb-77e80cd61318", "indicator--23d5d172-f1a3-4656-a178-6f5696aa8da1", "indicator--de4b128c-f9c3-468f-a752-cae3b1442ebd", "indicator--1779ba5b-ff62-497e-9b55-24671f33ace1", "indicator--4ee23579-3fac-4dc3-a25c-2bd0d93b5847", "indicator--84bc7af5-8069-49c5-839f-62501f6433a3", "indicator--cdaa7cce-9d12-43c0-a225-ed74d3cdf14c", "indicator--038ac853-98f6-4267-bd4f-4659064a3db0", "indicator--42aa7030-9bad-402d-8188-bbf2867f1967", "indicator--86761a78-73ad-4048-a0c5-da7c817208b2", "indicator--69baedd4-4467-46ac-8857-cbe06fe243bd", "indicator--ef7226d9-7d7a-4fab-a3ae-9ff617e8a716", "indicator--8d7525b7-c6dc-4db1-bb0d-4e88323dbd11", "indicator--352f3abf-e45f-4bbd-98e4-eded3ad6ca00", "indicator--04211584-0bd8-4ef5-bf3c-4926d798c43b", "indicator--d36d3c99-ff59-456f-80bb-89b48eb61076", "indicator--fbfb30da-d363-42e8-8e79-4edd3c6f6777", "indicator--806f4ee3-43b2-4e35-9c19-54418093f422", "indicator--6cb901e6-63d4-4877-9c6f-1c3277f3da86", "indicator--37703d89-30f7-476c-938c-c6f10279124f", "indicator--31eb9d0e-2067-412e-a665-da253f3c47a8", "indicator--2b342f46-d3a9-49c8-943e-1aac1c812756", "indicator--9f3211e3-9559-48df-bbef-08b892042546", "indicator--4f754403-d4df-4763-a534-8a1519a46043", "indicator--67d42fc2-dc04-41aa-b937-1f1a5c6f6ffa", "indicator--8793bf2d-253b-4595-ae01-ba5f8f9a1754", "indicator--f11c94e4-0139-4a5a-96c3-28475de98fe8", "indicator--b7f86ec0-30d3-4b4a-b451-c9723e6a94b7", "indicator--df9ae82a-d5b2-44eb-adea-528c7f4f7551", "indicator--3d8e11a6-59c5-4f78-98d3-758ec85c13de", "indicator--686405a1-1c08-42d5-9657-8db901186a92", "indicator--907ab45e-92a1-4153-9015-c36645d90bcb", "indicator--c17f3c80-2f5d-4177-94a0-ffa9ccfe6e04", "indicator--bdf2c7ab-0daa-48cc-bca5-1302844f7ca9", "indicator--21b83388-9d8f-4849-ba46-e53d0c67e44b", "indicator--9221061b-176a-455b-95bb-6b67551cd73e", "indicator--e2c07951-7209-4e30-98b6-fa2c612f4049", "indicator--384a43e0-370d-46c9-9542-07e75cd16d3a", "indicator--7d2a7f76-705b-4ba1-ad4d-22bcebca8c54", "indicator--2e20e545-395f-41b4-b935-baa8a88ed967", "indicator--41d88b30-33fe-4762-9bed-de033e8733d1", "indicator--76fc1632-f9c5-4495-9b3f-534537dab040", "indicator--385c09f9-3540-4de6-9c52-a98435ece9df", "indicator--fd02b60c-b801-4171-896f-a010e2114d81", "indicator--44c0f1ec-8616-4ccc-8cb5-786e687b1626", "indicator--2f26b613-19c9-4a89-9ecb-f5e44c3339d8", "indicator--37312181-3bba-4e20-9aba-64e84d7c83c4", "indicator--b5feb8dc-9768-4405-b4ca-b4a3ebcda74e", "indicator--5c745ba3-36f5-40af-b77e-829bd2e56241", "indicator--0bb74f4f-40fd-4931-8caf-299636128614", "indicator--7029b707-dc77-417f-936e-cffd5a9eac17", "indicator--31d06e8a-7de9-40a4-97bd-99da910e68ea", "indicator--6583adb0-36ff-4fd6-bb27-fa10b590fb72", "indicator--86fd5ba6-a4b7-420a-ab2a-8e9330d52ef7", "indicator--82a1c025-fc1f-4067-9e1a-001b8438634e", "indicator--fbc29adf-56fe-49cf-b8f9-c559d25d9dd5", "indicator--2ce138a7-4823-4dab-be18-09dd260b587b", "indicator--f9ff3cf5-1710-434c-a40e-fe53e5a3e08f", "indicator--499f4866-a291-4577-8166-1ebe362c887e", "indicator--0f1a58a4-ce01-4d80-94a0-c5027b7d16f5", "indicator--a29b72ea-2878-45f6-80a2-9dc6816c9f03", "indicator--6d4d455d-2db5-48b5-9a33-7ff651ae76d0", "indicator--d99c0994-6c52-4960-a25b-e2ef8fdb6f33", "indicator--b4b49d2d-74a7-4359-a456-011e3a7a0fa9", "indicator--fb1f733c-1835-4c59-a88f-ef138e5479c5", "indicator--a1c30b5d-e06f-48db-a8b3-32d1ded00934", "indicator--cb3dc3cd-ab65-4906-a969-633d09e91214", "indicator--89b723c7-74a4-4866-9002-a7c0c9c6ecaa", "indicator--15d1b410-87a4-468a-b29c-6c97eb20dd28", "indicator--c43fcb59-ff8d-44b8-a3aa-014fc1af1daa", "indicator--3692ce38-547f-4bb0-a9c9-497b61351f0c", "indicator--7cc01752-49ec-4999-9e66-bfdd96788494", "indicator--83fcc229-0655-4e4d-a23b-8c3f89ac653f", "indicator--1ca2ff59-5b61-449b-9474-e135772a35a6", "indicator--8aa576f7-0dde-42d5-820f-ab51f8872310", "indicator--6a297938-955f-4fd6-9603-cf564bad6ed4", "indicator--cf009b7f-88db-443c-b949-bd7614afb8e1", "indicator--9579377c-631c-4f46-aab4-99b60fc0b6de", "indicator--03468d99-30ac-492e-8feb-fda03947d46e", "indicator--baf05ba2-61cb-43cf-a737-69e9f288e684", "indicator--d25eade4-511c-4003-b339-95faa264cae7", "indicator--2becc9df-06bb-4fbc-8ea8-cb037234e936", "indicator--d71a33b7-bba9-405f-8556-b6b68bf9a467", "indicator--e10016cd-edac-4c62-9252-6374903ecda1", "indicator--99402513-226b-4496-823b-c05867a3205b", "indicator--91026da8-cd18-4963-829f-40afab678d2f", "indicator--ac526215-e00e-4342-989f-dc231ae5792d", "indicator--f01116d4-5b24-47da-b822-71befe2ad520", "indicator--9c472cb1-df27-49a5-a962-f02eb2ce4bff", "indicator--de5dbf79-0761-4106-9c86-464154d87e41", "indicator--ac668596-7d3b-4867-9693-97f65efa48bb", "indicator--a77fa3fc-d04a-4c25-85a6-b337e5b51e84", "indicator--eb6082b9-8090-490c-8c16-14a6157ba893", "indicator--1e4f8ca7-7a3b-4d17-862c-0a34882ee60a", "indicator--200dd8b6-21fe-411f-934e-5407da0f4f94", "indicator--5a274de4-6e46-4c4b-b0da-3c6881774d0d", "indicator--bdb9453e-816a-472d-9d0b-0ff3463fbfe4", "indicator--c3f1f5d6-e853-40c5-a548-1536a92ec211", "indicator--73886ec9-ebc4-4b90-b71f-45f063e4e9ca", "indicator--b80998fa-2705-43db-a04d-71cec012e109", "indicator--753d82dc-de86-4921-bc62-6efa16a5d30a", "indicator--c4f0f9bb-0949-4df5-a1b5-96116c78c392", "indicator--12bdd697-e601-469f-95a5-a3183e230d67", "indicator--736cba82-1fac-427b-81f5-37ccb920f32c", "indicator--ed4f3939-5d2e-4581-8f6a-dde94568eae8", "indicator--1b47b48f-be9e-4b1e-a869-5b9b462641f0", "indicator--9e532dd1-b692-4441-8d32-f33c9108848b", "indicator--402773d5-18f7-4c50-a8ef-565776841cc0", "indicator--072fb4ba-e2da-4fa9-95a2-7a2c2bbffb05", "indicator--eec9e72d-1549-4841-ad9b-34ac3375fd23", "indicator--37813f62-09a2-4aec-a957-ddc4b6e41434", "indicator--6ee968ff-a757-432e-a4c4-fb8811bf143c", "indicator--b0006417-7fc0-44f6-8203-123a3e44e064", "indicator--d443d7bb-f776-49a3-9b1f-2d504172355d", "indicator--a9f53bd3-3bfb-4a8c-84df-d2d257fa7aa1", "indicator--3a59e66a-e191-4057-998f-b9b1930dae26", "indicator--e4ae976f-b676-4e04-98d4-ba58a9fe52c4", "indicator--32cd9c4c-e5be-40ee-a86a-c7b36681eccb", "indicator--03a57fd6-2578-4043-8ebe-2674eb21c0e6", "indicator--4f98915b-23fb-4d52-9dbe-71aaaa7e5b0c", "indicator--7d1cf130-3829-4f4a-a4e4-529a0547665f", "indicator--9dbbbd05-1a48-4fe5-ab5c-e3df09e8bb83", "indicator--2dfeed81-0a2d-48e0-b51f-479f0c376fab", "indicator--4d91aeac-190d-4d18-99db-c3e5dc94e7db", "indicator--4284c9ff-dbad-4a9d-afef-573d066916d1", "indicator--9f85ecc5-a388-498a-97f6-5471572edfa0", "indicator--4e082beb-33be-46e8-b72e-d8e7ac94ecb5", "indicator--4c1b5530-9797-43a8-a393-1982da3c70d2", "indicator--00d41bfd-9efc-4080-9ac3-57e435e88275", "indicator--017151d2-e7c3-4ca7-9290-f7d4cff2d7ea", "indicator--03e6a9bb-4525-4d9f-80e9-8daea68d2af3", "indicator--86ac2ddd-236b-4e2f-b752-c31a099984f5", "indicator--ae13a5ac-05ac-4b7e-9f95-e58e9e214a37", "indicator--34b68788-a73e-4843-8f40-6f766f7286b5", "indicator--0be8968f-7e46-4cf3-8560-7349973f3017", "indicator--a84f0dcd-f5f9-4305-8fb5-a5b24d256db2", "indicator--ff7f6412-5904-4455-85ba-2e58c5d3f9c7", "indicator--f3898bce-01a8-4c6c-9539-87327360a5e3", "indicator--6981ff9c-85a9-4bda-b093-b25c796304c6", "indicator--d3011722-e308-4b51-aa1b-042a8f8b1d62", "indicator--043d799a-003b-407c-9ea3-2936b415a3cf", "indicator--f3295d02-162b-45f3-ab20-1a019b2af47a", "indicator--259ac2b6-200d-4b37-bfc9-98f2d7cc1538", "indicator--8e070fd5-b715-498a-9bc8-697fe67cbab4", "indicator--c3b53212-fa02-464f-b356-d61230fd8432", "indicator--51ea3e86-d1ac-4267-a759-7c705502d691", "indicator--fff91ba3-d198-4d5d-b5a5-184ac9c65c82", "indicator--fd69e683-f20f-481e-a57c-51eea9ed7e6b", "indicator--c1b9681f-5d48-49cd-a1f7-86577e06db3c", "indicator--03e88ad6-ee90-4774-982b-ec96411d168b", "indicator--aba41f8d-c711-449b-a347-4de4799d1754", "indicator--267c4074-9660-43c4-8635-33f6652b413c", "indicator--9fade963-afaf-48a7-89a5-cecb7e42c0d1", "indicator--f1685e82-0b10-48c4-b970-eead31601a4e", "indicator--2ba8b162-588a-4ae0-9c46-55a48addf280", "indicator--f97e4e26-173e-4f00-a746-1c964d361022", "indicator--69c0d149-de44-4be8-9b71-b8d0924f800b", "indicator--47629dc0-df6d-460a-bb8b-1ac51d25c94d", "indicator--b4e15a1d-656b-4388-9416-1d71c8d752b6", "indicator--a92161fa-09c2-4508-a638-da2eb39050cb", "indicator--fdd2a0f4-2089-417a-b235-7de15fc6cf87", "indicator--75271fa9-262e-4cb5-b776-ee66978bb7d4", "indicator--0891576e-c12a-4416-8809-86202acbd743", "indicator--75875cad-023d-45d1-8984-259e5da77bf7", "indicator--b132db2c-e827-4b97-8dd4-be5f33979558", "indicator--e14f0933-65d7-4da3-9389-ba53d1730c8f", "indicator--e28e7772-423c-4ac4-a0b7-e9c81b75d294", "indicator--b172ad19-f2e6-4835-b150-5c45de0525de", "indicator--dd19a12b-0357-427e-b481-12d61bda6fe3", "indicator--c76c73f5-27f4-46bf-adbb-ea75fc948f6a", "indicator--7ecbce55-6b55-4638-8dd7-03cc4982cf82", "indicator--fa908299-cee1-4a0c-9770-6440a1ea0dc2", "indicator--a82bb348-6408-41c7-84ad-a39b99a5da94", "indicator--da9f33af-8f6a-491e-a9cb-220bc487230e", "indicator--3ccc5329-0957-4be3-9ff0-874b9fa96083", "indicator--e60cbdc8-893f-4902-ace4-dacb9042fd9f", "indicator--26e4c0f4-02e8-4d8e-801c-79c2a804fe92", "indicator--bfd042e1-1bc1-467b-bbfc-68f41566a6dd", "indicator--fec8869f-f722-40f5-8dc8-9595746937a5", "indicator--8db06073-e2a8-46cf-8c29-155123b668c9", "indicator--52d540fa-721d-41ee-8cb4-4b1f89169b8f", "indicator--06d54e60-8bc1-42a9-81fd-53113dc132c5", "indicator--2532dce7-3fc9-4520-b88b-f5acd91d485e", "indicator--ced81691-2242-49cd-b98c-017965905bc1", "indicator--ed186e5a-3883-4244-90d2-f1eb0a3305de", "indicator--d9d1ac24-286e-4c33-ad74-062d9875b5ff", "indicator--31018266-4c95-4c28-9b54-7a23b951b449", "indicator--8ebb3e5e-152a-4da9-8b24-b0f1a394cfb7", "indicator--585b4a25-5429-4643-a23e-6935c61ed75e", "indicator--01b1b21e-cf44-46bc-9df1-6941068e072a", "indicator--51f23388-095e-4c92-933a-7740fb3ca062", "indicator--d046372b-c4fc-449c-bf94-588efb9bd597", "indicator--5298dd88-ceb7-43ed-9215-62882e65c45c", "indicator--82cab3f7-6673-4f4d-8c58-9dbf0c01e81d", "indicator--8cc8e7bd-e086-4003-842a-90140ef7f92a", "indicator--4be8c212-24e7-42b4-a368-cc0aab84f9e1", "indicator--5f95f9a6-7acb-4bf9-8851-0eb156e158e8", "indicator--357c67aa-6b6a-4e69-bfcf-012eb536a9b1", "indicator--617f017e-29f8-4100-9420-7108c5af8307", "indicator--68ce75f7-6b88-4b62-8274-cf57ec0b392d", "indicator--57aff138-19e6-4211-b503-a6d6cb6a30b2", "indicator--05c473fa-8048-4c07-90df-ac6359cd69cc", "indicator--cd5881ec-e892-4f8b-b83a-824bc0bb3d20", "indicator--6e19084a-6fe3-49f2-a992-d6395e388411", "indicator--f3dbb387-7e9d-4146-aacc-eae9ce466bac", "indicator--0573e734-b345-4b31-832e-3b560edd71fd", "indicator--16fd22ac-03f4-4491-b706-3c0b5f1ed06c", "indicator--e6d2a714-74f9-42ad-8045-16295bccefba", "indicator--559a6295-0d72-42d2-82e6-e02869795e14", "indicator--53269925-cfbb-4b6d-ab2d-c1fc75e08e08", "indicator--c4010a77-e5fc-4775-83a5-be64f08719b9", "indicator--d0350d66-2896-4e8e-8783-fea53559dd3a", "indicator--a911e7fe-74da-44ef-99ad-e24bccf43a54", "indicator--74483eb7-55a0-4824-b48e-cf03f443b670", "indicator--ebc527e6-6f73-4080-98af-e9008a49f822", "indicator--6aaf79b3-b7cb-4974-974b-107d236f3739", "indicator--06c2e3f8-5e15-4e40-b7cf-838028a81508", "indicator--a80af349-4671-45f5-af08-6a5a95f00a3d", "indicator--4390a08c-9c57-4c83-ac71-d37ed55cb731", "indicator--c487ab78-9de5-4c69-ac4f-e9b89effdf24", "indicator--f13f75ff-9cfb-4025-9c8d-490c24b76619", "indicator--12b3baa1-2eff-4283-8897-aa1013ab5e39", "indicator--5c7c97a3-3cb0-4978-b67f-50bd2c46242f", "indicator--43bfbe08-71ee-4b89-926c-e46c41de1a86", "indicator--542f7bb1-188b-4f30-a472-f0febd2cecea", "indicator--f46aa9ce-0703-49e3-a6a7-b2fa6fade727", "indicator--e626bb67-1c8d-4a3c-a937-0785c5fdc0ba", "indicator--38bab28e-3b19-4f24-ac53-d20733d5d21f", "indicator--335014c1-a7e6-4afe-afb8-f3a9d059b68c", "indicator--d097d6f1-0420-469d-9031-eb8b131193c6", "indicator--80151c70-431f-4813-adde-3c4283c2a93e", "indicator--95b4eace-9358-43f6-b203-7a2a9ccb8249", "indicator--8f05b8b9-8984-4d48-b305-5217234652c3", "indicator--2b55e5ee-5360-4377-926a-f1bbf893e686", "indicator--51a31c15-d70c-45f4-afbf-88558c850269", "indicator--b9df2871-ef87-411e-9d7a-de28e3ca0ee1", "indicator--7483f7da-edf5-45d1-b41b-b50d47c9a351", "indicator--18b002d8-e8a0-48a4-afb6-25694bc43963", "indicator--933c07fe-c732-46de-aa53-b2ac989a22a6", "indicator--a3d50fc5-8fe1-4db7-af96-d517c41f4a51", "indicator--eeffc16d-ab30-4dbf-bc3b-032150878020", "indicator--0408f64c-994f-4922-9453-e8be88a56996", "indicator--6ee92b4a-95cc-4347-a8b0-5f4a2bbee560", "indicator--c3cdcaec-abce-474f-8102-e2945f440246", "indicator--ff1abc53-90e5-456d-98d1-29f744f3dd4b", "indicator--6089c084-b41c-435c-bed3-c72403931ee9", "indicator--80f56ab3-13e5-4607-a4d7-e9196c80e1a9", "indicator--0cc01ab7-3a92-4002-9c1d-3efab6b4e623", "indicator--4c570ce6-2f4b-4bb0-a1a4-221bcde2d2eb", "indicator--c4667e94-33f2-43e4-acc8-ab9166205ef1", "indicator--3ed5092f-c0a4-47cb-843c-dd48a07bf067", "indicator--63fbae8b-b39e-4b9a-a632-f536d9727552", "indicator--afa488b2-b20f-4b71-9cd3-423c0a53ed9b", "indicator--fd8428fa-7b2f-4a9f-8f75-2d1311dca9fc", "indicator--3ab58011-6640-4575-b9f0-5318f97952e4", "indicator--0efdf3a6-5699-43be-b49e-56b0aa5251a1", "indicator--3a0f5a29-6246-4c15-a917-31923a612a33", "indicator--e847656f-2681-4f68-9582-7ee69eb5f91b", "indicator--4c21d134-029c-434c-9f0b-f91036f446b7", "indicator--b5f0e921-ad6b-4958-95a7-206ab26b552a", "indicator--e5a88022-d25b-4169-aa11-cc828bb93f48", "indicator--8357040e-4619-4460-b68f-ad96ccc46fcd", "indicator--2f0a6e77-a0cc-40c9-8d76-e88d8e50ab90", "indicator--ea0c591f-6d89-44cb-a733-6d2e221f2466", "indicator--037bcabe-6cdb-4dc2-9236-ec20a8fac684", "indicator--9d0a2e17-21a5-4807-9b18-30d0024480a7", "indicator--10cc5f91-6461-462a-8466-d2989be0fca7", "indicator--7654ad84-69fb-4f57-a3ca-61d868c81f68", "indicator--97d50768-6dfd-47e0-a0c0-1362feadb412", "indicator--e2cb14c4-1aa8-4c40-9dc2-c9610c93bc36", "indicator--8d3e85c0-b191-436d-871f-0e6347600f0f", "indicator--060502bd-3b06-4ef5-b0fc-3b130bb28354", "indicator--8dd5d1ed-b8d4-477f-a3b7-9a788d18850b", "indicator--2807d313-06c5-444d-8b62-02802a74845d", "indicator--19c80800-e58e-4014-929b-f0d9ba292014", "indicator--02adecd5-1048-4243-b516-7a6cfac4e991", "indicator--88f4bf27-f57c-4f41-921f-bc9892e633e4", "indicator--301631af-3ef6-4a1f-8815-16739b16e8ee", "indicator--6aae0425-5b2e-4e96-b353-c83299fb90f4", "indicator--0e088efc-6a1a-49ea-8265-f2f8ba3c0689", "indicator--a0e92dd2-087a-4523-ab72-4d87ca526c56", "indicator--73eb0d46-c91d-4cc8-be8f-40c52e47ff83", "indicator--b617c639-fb5c-4b1c-8f3d-8a4f483eca04", "indicator--0fb40bff-14c3-4fac-aa34-b7dc49ea9f86", "indicator--e923e52b-106b-4778-89b2-074e6837c48c", "indicator--33d57aa3-e279-446e-b253-7398f53ca3f3", "indicator--eedf2737-a203-48c5-ad52-477735d6f46c", "indicator--04520785-8761-4d25-a866-0f2ddae94bc6", "indicator--fd863828-e45b-426e-9d93-4064254a6a7f", "indicator--e6985708-b95b-4640-ad88-0125bba446cd", "indicator--472b8ec7-94d3-42ec-8c59-3b6e2b150cc6", "indicator--c2de9275-c489-4694-a702-5e3fada401cc", "indicator--f2e22330-79f4-4cdd-9b1a-0ed33ceafa68", "indicator--17d6178e-6db6-440f-9a15-44c5b56070cb", "indicator--8b5e9048-8627-42ae-bd4b-945065b2547a", "indicator--b59527c9-4bd7-4b7e-8f2f-e31e2a3bf628", "indicator--3bd7d709-168c-4a41-9d96-0ee8a423b9d3", "indicator--3218e4f1-d702-4580-948f-d591460a5e77", "indicator--7df0d3e1-e348-43f9-ba39-f7adae396796", "indicator--a7475e7c-2291-45dc-9580-4eb0417a646f", "indicator--749da6c6-16f0-43af-b9fd-bf3e4134b948", "indicator--67eda6d2-cbb9-42b2-b36f-616b4be40520", "indicator--0f5e263d-801b-438c-a14d-14fc5bb6f10e", "indicator--63480f48-9c1b-40d6-b05c-1e553e25891f", "indicator--eab6f37f-320f-4910-a2a2-4fdf54d31972", "indicator--45465823-9e0f-4daf-b573-6d7cb1b9563b", "indicator--e2ea6a54-8bb7-4e9e-9b9d-602552042484", "indicator--1760ba9b-88c6-4bfd-8cc4-114f067f2dae", "indicator--b04f2e1c-c9bc-4705-9575-6fa07deadd64", "indicator--e2b0b2ec-2cd5-4107-9570-1fdabf84ee38", "indicator--f196a9ba-c26f-4751-a8fe-7f86b348fbc0", "indicator--76f74f1a-3d89-423f-8fb1-8c11f68b6c22", "indicator--527af007-92f9-487b-aea2-a87c528ea142", "indicator--15108b4c-299e-4fa7-bbec-daa91c0dffb4", "indicator--b75cd6b8-42c7-4823-ab36-41c3f3c4caad", "indicator--da48654b-0138-44e3-8d9a-4aa8b5088dc4", "indicator--70f6698b-33d9-4b01-a82f-6b85d9f7262f", "indicator--8c4f87a2-3b82-4769-a00b-0c8c632a8e54", "indicator--366cbd3a-8592-454d-9158-26c3a8b507de", "indicator--bcc5c38b-4e30-42d6-a73f-274636cc5311", "indicator--b117553a-6378-4268-8c4d-3c1317f2c3ac", "indicator--1029eef4-e74f-4ad0-981a-7f5a87cacf97", "indicator--29a9c11b-f293-4cfe-9683-12361591823a", "indicator--29256c94-f3b7-4d70-ad8b-bd95ede0c619", "indicator--cfdd937e-ae20-4cbe-9d14-f38b808b09ff", "indicator--2b1da298-ccb0-4066-880b-eddad9556ee4", "indicator--8c4415c4-6a6d-4345-a345-c13a055317e6", "indicator--cb0e091e-502a-4a3f-a1a4-959ac10bf05d", "indicator--bec6ba21-1e3b-4cd8-88bb-d434f7e28ae1", "indicator--cca44f42-fb03-4bfd-9661-1eb11e83d01e", "indicator--652ff2be-0a9d-406a-b47f-2088a0ae331c", "indicator--4340fe26-f15c-4124-85a1-9534b24c5076", "indicator--65e6f736-25da-45b0-89df-02336e652399", "indicator--69468499-72f9-4a1e-a095-7158ac928496", "indicator--8ebc75a5-cb92-4936-b269-7cd15e813f67", "indicator--033ea69e-28ca-45b9-b972-cc3d993be938", "indicator--51d91a24-e96b-44ac-886a-916379ca191e", "indicator--745243e3-4d80-4ee6-90f5-1a5ffbc1ce33", "indicator--d160698f-4bb9-4e1e-9a57-2c89a9a32be1", "indicator--5e3dd13e-25d5-453b-9e77-9853f03fb047", "indicator--61757f7f-97d4-42c0-90c9-871b0585657d", "indicator--7c024757-005d-4eb0-92e8-c1399c9c8dcc", "indicator--e08c76b3-4c7b-4e0d-ae8f-01a636b64d14", "indicator--85aa23be-a6bc-490f-9f36-6a8498300b69", "indicator--4c043a27-b22c-4bbe-9b82-9f261bcc0afe", "indicator--4c38ac70-6aa8-4924-a00a-01905a27ebbf", "indicator--e021fd94-c59f-4f9c-94cd-362272e4ca98", "indicator--928eee97-a58f-4485-9327-24cbcd4bddde", "indicator--79301fcc-f127-471a-9c14-6df0a6721d47", "indicator--72d58743-5469-4f63-8b65-284669a11a83", "indicator--b737bdd1-52e8-48f4-a71e-a8fa0af5deb9", "indicator--5861126e-38a1-444d-a7cb-0d5ffeb53228", "indicator--b53c0593-7e5c-4e59-8902-a88e690ab9b1", "indicator--d273d573-d4df-4641-b7c4-b1dba8784f20", "indicator--7fa0050d-e990-49b8-8c3a-08ffc813d2f1", "indicator--211bac29-fc19-4ba6-b8c0-81babaa3ceb6", "indicator--e3a93888-b108-48f8-a05b-a4a9b5281c95", "indicator--41498fc8-7a95-44d3-aedc-83d81519c656", "indicator--a3c0a65a-f32d-426e-ba97-996268fa8047", "indicator--45e20206-5a4d-420c-8c18-5c31eb182d74", "indicator--52512534-bdca-4ae0-86cd-f066e52d35a9", "indicator--18a445d5-8633-48e0-a535-1f699e562f06", "indicator--66f89a4b-c704-41a2-97d9-063a2047a430", "indicator--2fe526a7-1aac-4e89-a27f-0008fe857a10", "indicator--4b8a8811-5ee4-4f3d-ab31-47230c3a637e", "indicator--3eddf579-01ad-48c1-af15-c79259b83a7f", "indicator--830d29c6-79ae-4240-827a-9473dcd48456", "indicator--c07714f6-7f28-4b04-9ccc-960cf7a45012", "indicator--bcacc268-cdaa-4801-8bff-5f6224adb9c7", "indicator--3040b23a-9579-4c6b-968a-3dc5d6390855", "indicator--14c8f056-7363-4699-a7cb-b3bd7be6c2f1", "indicator--9e84d434-e16e-4114-9bcf-aeb9e860c650", "indicator--358683f2-40c6-46aa-90d8-b6dadcb5b781", "indicator--b9018b68-1b3b-459a-b180-2c9b071d8f1c", "indicator--be4780bb-8726-452b-9237-32661a03dddd", "indicator--b7352b90-1b88-4617-8651-4b8ad7149c76", "indicator--ec057ef5-5f70-4373-8722-4ed977775d93", "indicator--167d190e-a9b4-467f-9454-efb7dd8e4023", "indicator--2461d52e-da4d-435b-95c9-282cfa756335", "indicator--0b737608-f6e1-4fcf-ba87-172c1a38f5d2", "indicator--4240842b-1ca0-4b28-847a-498bd4250a9a", "indicator--7ed264ac-e0b4-4aa1-ab27-79f16caa0ece", "indicator--bb92b4f1-856d-4e38-85ff-4dad19b35060", "indicator--740e237a-a55f-412f-8f3b-943988fdc495", "indicator--13bf7e8d-0d63-49bd-8c7e-199054783d65", "indicator--e14a991a-347a-4d03-ab52-2bb76dad755b", "indicator--8de5e66f-be1a-4062-b15c-870b07c295fc", "indicator--cd9a9222-14a2-4b6f-83e7-12af857da12e", "indicator--13801e73-f6ec-4e71-9e32-c14007ec793d", "indicator--2bff32e0-d22d-4678-9770-31313a55cb09", "indicator--dd94b193-b093-483c-9a1d-b911b14903b7", "indicator--9317de1a-9166-4295-90f7-9e79500380d9", "indicator--f7f73e74-2b45-41de-96f9-0dba8ff8d7d6", "indicator--03577833-ff73-47c4-af25-9b609cc591c1", "indicator--6cc86aef-d695-4b3c-a9ae-14db01349b82", "indicator--8dfaf91a-5247-4b34-9875-b04c9be42d26", "indicator--0cfd154f-750d-497d-bc16-6f139c4b226f", "indicator--fd6160c2-3a67-4fa5-8654-342888d5149a", "indicator--a21de440-b86e-40fc-aa51-15de6895f740", "indicator--68d97ef1-eff7-4ae5-b06a-ecc144acc2e2", "indicator--17920d2b-1777-4ab8-b276-045abfe0a7d6", "indicator--7f97dadf-55c1-4948-a6e9-b13f3a8e9c15", "indicator--fe82d5cf-719e-4d29-a531-7c65d24023a6", "indicator--1f9c070a-9f6a-4b75-94fb-b52ff5b62441", "indicator--14118b94-793c-478a-9004-b9903e2eef76", "indicator--a9118259-2a4f-4779-a78a-209cf9111e20", "indicator--985a6b35-7d15-4b31-b03a-f0cd59d155b6", "indicator--81bb8cae-1061-4c41-90bd-53ea2eda97fb", "indicator--e859465d-fd8b-45d0-ae1e-07a159e31e30", "indicator--b25e4d36-c71e-41ed-94b0-283afd5e6f3d", "indicator--45ebb615-2846-4c45-9f60-88c1d5368d75", "indicator--b9f78c7d-a831-4134-b6fd-9e36f11ac96c", "indicator--e354c705-f42b-4e9d-9df2-4fb8ad6c295e", "indicator--6bfac264-9db3-4375-9222-98a3f624fb19", "indicator--1fd8fcb7-3081-4f64-b7c9-78359cd35b94", "indicator--6fbaa046-aac0-41ea-b030-288bc7c06e14", "indicator--2e99ba7a-b0e7-4e5e-a7d6-fa5cb29b5214", "indicator--40201959-eeaa-46ab-9daa-b47aba1c5440", "indicator--50097b3b-2383-455d-8a32-78c173be79b7", "indicator--dc3c90b0-5574-4bb3-9094-3ddfed92aa3a", "indicator--685b8694-9764-4c0a-86f5-d21c0ede0653", "indicator--10b6d153-3d43-4d93-aac6-0876f2a0ad67", "indicator--82b135ee-ee63-4c54-a3f8-bc83c6cc8854", "indicator--f092bfba-6496-418e-aa4c-599fa1b7e61f", "indicator--ef1b78cf-e795-403f-8975-bafe310bdf52", "indicator--81782cfc-a2b0-47b9-bc70-168aff015d81", "indicator--1123ee5b-8792-4602-8235-b9b51a4e4805", "indicator--0d31b4bd-4965-4c91-a00a-05989323a669", "indicator--e03d5439-d395-4a95-a486-ac9d7233b128", "indicator--403e8c43-7633-4909-a24d-87016e43cfac", "indicator--be6ddef9-6eac-4256-aed9-d54d8400aecb", "indicator--964963dc-5932-424b-aaa7-2262e9819edc", "relationship--0e38179d-1036-4536-98a3-b7fdb5dd7fea", "relationship--f92b9a0e-1c7d-4960-a34e-3b1f2f529fdc", "relationship--8af6da6c-397f-46c6-914f-db20fa268cc4", "indicator--5e2c09f0-01a1-42e6-b745-5762e9a570cf", "indicator--f34561ca-9859-4a9e-b37c-cdf45a87e6c8", "indicator--0a0db55c-0a48-448b-b825-bc14436a8d34", "indicator--0d9223a0-e2e9-4a9c-a557-dd9e6a295ef7", "indicator--4d497871-db2d-4fbc-8ab6-16e9d5473883", "indicator--3a95a50f-2790-4158-848a-42d48c5fac61", "indicator--7fc16ac5-1ff2-45e7-ac77-528b1ac70156", "indicator--2fece384-eff1-4600-ba0f-bfe2de1b396e", "indicator--cbe885ad-7a89-4436-b7dc-86366e4dc220", "relationship--3691e23c-d6f1-4e05-823e-67a53ae2bb3b", "relationship--c7599f9f-fe89-42b0-8ab4-e4b0c8827406", "relationship--0c1fb678-cbaf-4240-a11e-641e5c86747b", "indicator--5bcd4cc7-65cf-4fe6-b343-ac9b085a890b", "indicator--b43898c4-141f-4c15-8246-226afb7d0a07", "indicator--514b34f2-6fba-4fa6-a362-a46871060288", "indicator--52c39738-87eb-4474-a059-0057f1993e8d", "indicator--86a273a4-8418-4965-8c7c-a6b0240f242d", "indicator--149eb9cf-8c32-4aaf-bdcf-661c1041a4f2", "indicator--0440cf28-6335-4ab5-9acb-2e4cfb5d859f", "indicator--885e2fee-21ae-4f20-b1c9-f21022fc7692", "indicator--4d3c43bb-8055-4a3c-bc62-82bf22b49b1d", "indicator--6cf002cf-0ae9-40f4-ab19-c1224002c244", "indicator--235b2e95-a2e1-42e1-945f-d72eca4f9f9b", "indicator--aec87b10-171b-4877-ae9b-65c70523e0ac", "indicator--e5157c31-947b-412f-8741-4655ec455201", "indicator--1490a87e-1487-4b8a-9819-b8f2676d7d77", "indicator--8829045c-d4a6-4a56-bfba-46e3eba479bd", "indicator--7c714040-3779-4943-9275-1bf37f7f558e", "indicator--8673514b-35ce-48f7-aef8-b0a6a2ba3f44", "indicator--b120113f-5c99-4026-969c-e44e020f3372", "indicator--31969e8a-bc27-4655-b69f-01b955cdb7e8", "indicator--b3ee12f4-3caf-4a16-a2ba-b045604014fb", "indicator--f7701faa-999a-47ab-939d-36c3a915d7ed", "indicator--76c4897e-6d92-4727-a4b5-ef89263efd32", "indicator--7629d3fb-ba83-43c4-82e0-fbd7aa74750a", "indicator--339f0e77-ce4a-4889-a72e-4fd566d38ed9", "indicator--fe3bbc12-c8d5-4efd-af1f-253a86b15bf1", "indicator--4322536a-9809-451a-a8e4-7844a00333fc", "indicator--7ec20c85-2587-4f7a-b424-8cf68b1181f2", "indicator--625c01d0-d74d-4708-b7d0-1b233a81a6de", "indicator--2d9ebbf7-cfce-4342-8785-dd0126d634bb", "indicator--2add0310-761d-4c18-9541-01b12ac68631", "indicator--ce0c178c-cc93-419b-844a-91cf2315fdd3", "indicator--c656c5fe-5ea7-4c79-8196-c9ba40217839", "indicator--3c978073-d7e0-4ac3-ba3b-01c6b9471d02", "indicator--1da99833-40d8-4bae-a44a-9168d1bf0d3b", "indicator--ea811e04-6f6d-453f-9ac3-60c8fde8688e", "indicator--a91f6df7-3ced-4c3d-aacd-734d1aab16de", "indicator--e187b00d-2e12-4a49-a5da-259995c694f1", "indicator--34f66342-e89d-43ab-9e67-99d760f2e581", "indicator--deb32fa2-f241-4fd1-a6e5-0ef59909c31f", "indicator--e3e54aae-e64c-4567-a8bc-993409544fdc", "indicator--b6c639b2-ac73-4faa-a9f5-92ec4d42c265", "indicator--93280d62-7cf6-4799-9711-d0110b88b2b6", "indicator--ca54f8a3-239f-46a0-9cf9-f2d277095556", "indicator--efdd38d8-dd48-4602-8a04-1af2b1c5ad23", "indicator--6df9d1ad-6522-45e8-b7ce-8e24bf149e68", "indicator--0a6c5d21-5658-425c-b405-8c877ca9622f", "indicator--ba881c08-ebae-4218-abf9-d41ec62ffccf", "indicator--75fa0590-cee3-480b-849a-d3d249739767", "indicator--08ac6b37-0d92-45e1-ac5c-0eeb94b66068", "indicator--592e863d-0aba-433e-b660-548198382d2b", "indicator--da25f06d-392f-4a74-8276-fafe4f589674", "indicator--d69ea936-544a-4bc7-8c70-570cd7eca70a", "indicator--042ed8c0-69be-42b6-b21a-c40965d5ac62", "indicator--efb4df8a-3fe5-4f5b-bedc-4a7d6e5b2777", "indicator--f2cdab03-36a6-49de-a4be-eae6374df3de", "indicator--6b67e751-448c-403a-a69f-e3849b23190f", "indicator--e578d87d-4cad-4b7c-b244-5bc4efa3bbab", "indicator--c4c930d0-2b3d-45d1-960d-f0d303ac5e16", "indicator--d96b62bd-b285-455e-89d5-dafa252bc2b4", "indicator--753535a4-f87b-4566-b3d5-3fb8f00ab692", "indicator--ca722e2a-512c-4826-8920-cf53ab9d526b", "indicator--71fbdfc0-737c-4366-8360-b65129cf7eb3", "indicator--049dcb4d-01b6-41a6-8723-0c2815702097", "indicator--981b0316-9b6c-4732-98ea-2c67288bedac", "indicator--77c842f7-2ce8-4e85-a4bb-34cd05ecaa3a", "indicator--da39b961-1360-49a8-a828-2b26a60fc63a", "indicator--7c817ef9-8c62-4a1d-a53e-4be4dc4f407b", "indicator--eba84c28-96c7-47a2-81b4-526245364e0e", "indicator--7d4cba79-80b7-43f5-b21d-a029890f874a", "indicator--dfff125f-5ccc-4687-850a-411e6ae759f0", "indicator--178513aa-5bff-4bb7-99c9-5e6822bc409e", "indicator--4d79104c-1d30-4491-bb0b-e370ac0940fd", "indicator--fea6e16c-b7f8-49f9-8760-1924892b1de9", "indicator--a9c682c7-c9f7-487e-9d6f-4b1cf677a4fc", "indicator--6bb5b7e8-72cd-409a-9077-da5a62ba0ec0", "indicator--46cda1fd-461d-4109-ab82-393bfc2da148", "indicator--bde7063e-42fa-4e96-98f8-6c91a57d15e4", "indicator--5569be66-df9c-4109-a519-3da233100324", "indicator--7fe09d0b-1cbe-4305-9ed9-abea783cddc1", "indicator--6188ea5a-0730-4666-82a3-7b4877874cd5", "indicator--5e67e655-cef6-490f-b7bf-2eca72464c94", "indicator--0b8deb9c-4178-451d-9fb4-8997afa27018", "indicator--f0979300-0f01-403a-8743-1a43130f87db", "indicator--58f940cb-3b78-4079-9528-8ae0bbf91d9c", "indicator--f721d7c1-646c-4cc3-b64d-1c52506c7b86", "indicator--725a722d-3761-4f3d-9dac-7bf5e4e06608", "indicator--f77de32a-1277-4fc0-9a4d-8bc39b091fd8", "indicator--cc8e7ddb-d264-4fe2-b517-1c3b84b07f5d", "indicator--04bd99aa-9fa3-4797-b255-12feb66e6727", "indicator--d7435306-0922-4d36-900b-6c8169ad6ff4", "indicator--f53a0579-70af-4f2b-a424-2b906e197095", "indicator--faf92b21-49ee-4d5a-84e0-cb0ed5c6d900", "indicator--9aede7ae-ab9e-4580-860a-aba913254d5d", "indicator--f8c4b4e6-0575-4cbf-a87d-20581f210b57", "indicator--389f44b9-9b49-4075-bd2b-0ee2e35f649e", "indicator--436c49c2-ff6b-49a1-ad2d-25eaddd85e03", "indicator--ad748ca8-3e19-4c4f-8f0e-c17ce42dfada", "indicator--32abf020-00bd-49e7-9d6b-ffeb66198b30", "indicator--fb95d633-261e-4bce-bf8a-7f719b491964", "indicator--7af6d2c4-12c1-4307-b113-3d207a67f6b0", "indicator--d6eefef3-f1cf-4e0e-9ce4-037126337835", "indicator--6dbf9525-9bf8-48ac-82c4-27e37a278c1d", "indicator--c2f59808-7f66-4f78-bf0d-04bf8bdcb308", "indicator--f00d7ee1-225d-44be-9ad0-0a73a3bc3dc9", "indicator--0a67848c-884c-4fe1-8450-8ea4c218193d", "indicator--11f12928-7ff3-4119-bd31-af28ee36853d", "indicator--25510fd1-64a6-4d0c-815a-c35ecb9acab0", "indicator--d8a92f0d-bba9-4bfb-aede-b7b305b7d087", "indicator--d92e6432-60b3-4d75-a987-a26b281ffca0", "indicator--fcb4e6d5-323f-41ca-9a96-1fe65be5ea60", "indicator--617eb0d9-e06a-490c-9296-159ff259cea4", "indicator--d92c5009-d9de-4269-82af-356f35d008db", "indicator--0c0bbc7d-83b7-43ac-8108-d4aaf96a7d88", "indicator--84095b8e-21f5-4b7e-a5a9-0d9ecc438e47", "indicator--fef1db3f-ee52-4b03-8a4f-371f630d6707", "indicator--743c8f0c-04a3-4058-8972-db7c7335cb59", "indicator--81de9ca9-130f-4b19-a23c-49508df0d5c8", "indicator--3ef6b0eb-f87a-4c6f-bc06-c5af19c027dc", "indicator--5dfb3439-65c2-493e-9151-098b2a6396de", "indicator--d9d08a7f-775a-44a5-9a8a-19a578102835", "indicator--19231990-ad74-4972-9380-bf017503a9c3", "indicator--7e0ec082-626e-47dc-a26f-0e33b8a61044", "indicator--658d8a91-655c-485e-9e59-6cf00d335aaf", "indicator--8571d21d-969d-4a02-89f4-03dd56a17e88", "indicator--44ec448f-432b-4e23-8a05-d6e6e93a4163", "indicator--ff056a7b-7269-4387-884e-1b38fb83f9bf", "indicator--34bba0e2-62aa-41ca-a610-181cd735dfc3", "indicator--f96dba1d-be4f-4d99-b9c4-a55734f7b7e1", "indicator--47e86095-6aba-42bf-9b2f-e6457de36546", "indicator--29e082e6-86f7-4642-92e5-b7c4c5dcee31", "indicator--2dbc38e7-f006-4a74-9da4-6bda74011d43", "indicator--60f843b4-4d7c-42cf-9665-885dcbfdf895", "indicator--0d19f3da-46be-48b0-a5aa-8025f4373937", "indicator--0cc430fb-fe7f-422e-b86a-7fe8d196cbe0", "indicator--856a83f8-8c86-4446-86b2-5097b238bec7", "indicator--7aae4851-b055-483a-8fbf-8b6fce689359", "indicator--22044542-509d-4060-8fe1-b2fe1afe4454", "indicator--f315676e-ff82-4efe-917c-aa1a639d337e", "indicator--fff1353b-40fd-44cd-9f07-cf61643a6f77", "indicator--33ded220-a1d1-42d0-8517-48ad88df4062", "indicator--18269b2c-fe92-4b69-9f7b-1f0851d5f4fa", "indicator--bdd86e14-785e-4274-b49b-ad56575e966d", "indicator--d3b030cd-ac63-43f2-8f45-c52683b7b328", "indicator--eebfd83f-5755-4594-844f-06b64514e883", "indicator--d12e1aa7-1cca-46e8-9ccd-a1ce274f04a5", "indicator--25e08ce2-89a6-4497-83d9-ac7c89cfefc2", "indicator--7c8a4343-f22a-41c8-afbb-08a673a0fbdd", "indicator--57e6efb2-24c8-417d-bd91-537253e5c2ae", "indicator--2d130fc4-29b7-4fcd-9527-f91bff5f1210", "indicator--bda4f92d-ac4a-441f-9d63-045e8c83eb7e", "indicator--561ae943-6954-452c-a846-b763b52d7591", "indicator--40a5a66f-ade8-4484-a1e5-b753e927d9d9", "indicator--a6fb9bec-f1f3-46b8-a3af-d6113190adef", "indicator--17ad0fe9-7d99-4fc6-a29f-f2decca70a2f", "indicator--92943b67-ec39-4cb5-a93e-dc7f5d229c36", "indicator--46da30a1-19fc-4143-ab90-10d292769496", "indicator--5827ba5a-42e8-4eeb-bedd-b7c4553f20bf", "indicator--3396daed-d05e-4842-9169-717173a57d55", "indicator--5e1dec0e-9fab-4e34-83c4-415e603fa11f", "indicator--ff0616a6-d423-48ef-a0f4-b25584d5a62f", "indicator--b65b06af-3f36-44ec-9da9-19307f57bda3", "indicator--fe27e973-002b-477e-b834-42fa761356d6", "indicator--11bf839e-d3b9-49f4-8559-97191924323a", "indicator--0c98be68-e717-410e-aec0-5920dad5cfa5", "indicator--94dbaafd-5701-4917-9b52-46f8a20d45ca", "indicator--4ab962ac-5542-46d3-817c-bd958f91f2e2", "indicator--fb088643-5a70-487f-8ccb-0a9169d65c71", "relationship--42b737b4-7409-47e8-8cb4-2bfd64c2096e", "relationship--9edfaef2-859f-4dc3-a90f-f4f61449ca24", "relationship--a878eb6f-cb4d-4281-8a25-5a1fdd64b212", "relationship--926c6af0-1a60-4200-9412-2553b6a9cf92", "indicator--b06f872e-d800-46d5-aebd-fb3d4d741b1e", "indicator--bc8fb330-eca9-42db-ac84-4dd1c7185470", "indicator--a3dc4136-2ba3-4fc7-b99e-e41327adffb7", "indicator--c00a7366-7072-453d-92f6-941d263379af", "indicator--ab6f2c12-0dd5-4f24-a073-a71a7f82003e", "indicator--3fc2e7e2-491b-4d46-9726-86737b9879d3", "indicator--5aa976db-d59e-43eb-ba7f-dae9abf1711d", "indicator--3e6db069-dd12-4604-91a4-40cc8fce60c8", "indicator--0edb0a2f-0e49-454b-a897-14e06680b552", "indicator--c86fde72-e157-43ff-bde2-fb5b9825745a", "indicator--1305eefe-8c58-45f4-af0e-a7020bc58a5f", "indicator--b3e05f17-041c-44b6-b6ec-fcd249ec068d", "indicator--2e33973f-9a80-4527-add6-94ba715eb114", "indicator--a4458460-58c0-4b22-a14c-de55defd393b", "indicator--d9593186-c4e0-445c-857e-88d4f99f2f87", "indicator--3783f155-1375-41e8-8e3d-d62d414194f3", "indicator--8de563e2-99cd-4b08-97f4-0c2f37e5ee42", "indicator--cdf5a951-4e53-4977-ae30-90909a88f0a3", "indicator--60280db9-8bce-4e79-a506-298c08d6213f", "indicator--600b7434-88a7-4018-9fa4-81095e0a8974", "indicator--618cbc18-a1f1-4562-9d1d-9a7fa6c6244e", "indicator--8dc26be9-0b10-4293-9c85-a5ad05728edc", "indicator--da9d7dfe-c522-4f1a-baa2-a988a507ea34", "indicator--8036b0b3-23b7-4c92-907e-f06141219e83", "indicator--ddeb5831-243e-4c95-9b98-23f70882ffce", "indicator--537f2ffd-4cf2-4aa2-94c3-f555eca03d16", "indicator--fcd27130-e7c0-40dc-8101-a7e81b42466c", "indicator--f3e5e2cb-8a15-4ebe-abbb-db6f70f94503", "indicator--bc982258-a08e-49cf-882f-403dc8884e80", "indicator--5d762387-12c1-4ccf-a4de-03371b94c75c", "indicator--38d9ae1c-1881-48e5-8eec-9311fa033008", "indicator--d2444b88-dd12-417d-8fc7-0a366c4e1e22", "indicator--6a8b2fd9-af15-4825-8c65-d7d3411698c9", "indicator--253913a0-1a43-4c7c-97d1-6ea692f86527", "indicator--016f8009-49bd-49cc-920c-b133ddb74126", "indicator--9632c4d5-4a23-44c2-8b12-1aa7ca823c6b", "indicator--fd65fb90-12c5-4ccd-af3f-9da107718ddb", "indicator--34221800-d00f-4f11-8020-fa44ff3ed03d", "indicator--0562ac83-d14e-4a7a-9aa0-2926c993e796", "indicator--7156fb4d-9ee1-4944-985f-b99f15d9c01f", "indicator--000f7001-725b-475f-9faa-4e006f7e9c16", "indicator--03288e60-11a4-4f33-888f-3582d5ce8970", "indicator--08d675b1-332a-4138-b8a9-e074d88608bf", "indicator--d4f37cc3-da4b-4812-b0e0-f01a5c98531e", "indicator--97060cf1-89d1-4cec-aeba-8900e1027c89", "indicator--0d117b7e-d539-46b8-ba2f-71bc92302714", "indicator--4d7e024a-75a3-4863-b70e-4de8179bb21b", "indicator--eb6a2dca-b492-44df-ba9c-2701e7412ff9", "indicator--4107d7bd-559c-4842-b628-3fa1d32a4af2", "indicator--8a11509c-1d62-433d-94ff-40382c202e9e", "indicator--38af9008-e448-49d2-9985-cfcd643ac473", "indicator--d4faad2e-7a6a-4e0c-9ace-6ebc54dd8700", "indicator--2b92853b-d9fa-4686-9852-f30616d9c624", "indicator--338af4aa-c9ac-4695-b761-623e786c7103", "indicator--58da16b6-43b0-4569-b053-5387678ff80b", "indicator--ff46d9ac-6d57-4bf2-a72e-0e2e3012fa00", "indicator--89e58f08-6d7f-4746-8688-c177d139c2b0", "indicator--f871207a-4f5a-4e49-aad7-abdbb0db42e2", "indicator--ff45aa9c-008d-40fe-9a18-86cf15b653fd", "indicator--ac480df2-4288-46b3-a56e-66e91220c066", "indicator--037245e3-94e1-4b39-8e63-e5f70f6a9669", "indicator--8998ade2-d87c-49bd-9bff-62b180338fbb", "indicator--7fd688f3-4553-452b-bd8e-817d1321584d", "indicator--deedfeed-a9b4-4106-8dd5-f4e83d6dc53d", "indicator--761a3a94-6dae-4780-97a4-f2df02e4629a", "indicator--11e3838a-3fbb-4a10-a85d-092f1920a671", "indicator--482e0822-1091-46aa-a5ce-04538a39b8b9", "indicator--74af2aea-9596-485b-9dc6-790fbe3e057f", "indicator--6669d23f-b48c-43fd-8ae0-138113284c50", "indicator--aec8bade-a742-4b23-ab42-057b8500f8e1", "indicator--d6305c61-750c-47e1-894d-f2418d5bc9e9", "indicator--e8e7edd1-5cfe-407c-b74a-233992f2982a", "indicator--76354ba1-a914-41d0-9277-8ef360ac33df", "indicator--a4a04206-617e-4a99-9470-7fcac0cb5ed9", "indicator--051654bd-4738-4fa7-9ebf-cff530f4ba81", "indicator--1ce6bfed-960d-4ccd-8db8-432ce11b4a88", "indicator--afd018d5-4470-41ed-a7b7-36ed1a1f19f0", "indicator--1fbbd110-8892-459d-aa72-53440e379815", "indicator--8d5a2e24-a0eb-4249-9221-bb6ae09517ea", "indicator--ced4386b-88ea-47bd-b17f-d83a097b6fbd", "indicator--c8837bd5-945d-4ca9-8f96-5bf7b1c2985e", "indicator--0aa07f60-66ab-4da5-9a9e-a8583800ca35", "indicator--382207cb-b335-44ce-8a29-39621ce277b1", "indicator--af74803e-aa4c-47bc-b60b-d561f584f167", "indicator--aa5cc406-fda2-4d81-b535-03fc15f98ea0", "indicator--8ecbf2df-6126-40ea-a0ba-1c8308cda925", "indicator--fcdaba89-f59e-420f-b2a7-6697af9dd7e1", "indicator--03adbd2f-8afd-4474-adb1-e8cded83d2f5", "indicator--7bba8b0f-04ab-41e5-887c-316291d17e9c", "indicator--9f5987d0-0849-4876-8a5c-2cd1aedde0f1", "indicator--377f754d-030c-4b6e-a207-e16fcf6df304", "indicator--9ee9df60-188e-45a6-a402-a055bd7270d7", "indicator--1c0fe101-6bdf-47a4-b4e3-a0526a941f0f", "indicator--4b943fd1-ea46-4d29-8641-b1bae5d9f66e", "indicator--a7158eba-e4dd-4d81-acbe-62709c8b41b9", "indicator--64f2ff8a-e691-4486-982f-2ff254613f5b", "indicator--068c1c19-c09e-4966-9027-6e6508c94250", "indicator--f9c60ae9-0613-4097-99fd-7097b4045d54", "indicator--7d86260d-243e-4240-b927-011c1c2e4b13", "indicator--eef5e6f2-5809-4412-8fde-5b73c9a46431", "indicator--d401a401-d996-4d1b-9135-28a1c8c5877f", "indicator--1d7fb069-3235-4a47-9e87-55ebd5dd1e3e", "indicator--3f8571ab-abb7-4b3b-82c7-c872637fb2a0", "indicator--78fa4960-ea0d-4a7b-9af9-9c35b2033d42", "indicator--93d46e92-dbf9-4bcd-8a1b-97f61405bfbe", "indicator--0ab459a5-01bb-4593-8504-e2dce7b78604", "indicator--6c824978-b53d-4911-b12e-a838bbb9962f", "indicator--a8a70c05-3b0d-453d-bf99-b2ec41f9e314", "indicator--110dc194-ae68-4b79-8a2d-d944424ce1f2", "indicator--1ab28ecc-36ad-4d9d-b40e-d0539625f47d", "indicator--7e1c9ebf-efa6-4c15-a727-1ac766079342", "indicator--6718ba92-7509-4cc4-86fa-16fcaf396cec", "indicator--785de4c8-e4b4-40c4-a212-571321ec6847", "indicator--fe0469f6-87b9-4667-9a85-4e8cf917f37b", "indicator--9585bbf1-2fae-430b-bd76-009d39a1cba9", "indicator--0557b0e1-ba04-4e29-b4f1-5e4f9bc2f4b5", "indicator--4735a35f-5c41-46cd-b4dd-ea1d0e538799", "indicator--8c81210d-e163-44bb-9416-749499d9bf0a", "indicator--e01d5546-46e3-44e9-b7bf-a377f3d936b1", "indicator--be83733e-9a43-4941-a319-fa5731556f93", "indicator--2ba5e68f-1514-4e1d-9d24-9975c88cc522", "indicator--f682a928-a712-4675-9023-65e35b6d1fb7", "indicator--0da935ec-8c2b-4543-8fcd-195e6a63a0f9", "indicator--b31c55f1-fcc6-43e2-9ba9-ed91132b409a", "indicator--ee018345-e675-4e7f-ad8d-00bf5de6a818", "indicator--50797778-bb82-40fe-bfcc-a493693f2a02", "indicator--d7c254e3-ed2f-4ef3-abdc-35cfe7637767", "indicator--f186d85d-faf0-498b-b9f0-5602c0d24646", "indicator--6fe904fa-4234-4f1d-8548-6859ce2cac5f", "indicator--d4d05e7a-e48c-4f02-a999-5dbd39fcbf62", "indicator--78562a6e-ffd3-4cd8-8b08-0db782ab5d78", "indicator--4666c629-c982-4ea9-9235-392136015260", "indicator--ecaa1202-fd6e-49e5-aedd-6adf6d05cfb4", "indicator--99097647-5c3c-44eb-bd09-c9148e82e169", "indicator--94fba2f1-e900-4bb9-a6cb-b6d7dbf8540a", "indicator--0b299b91-9a31-42dc-a442-6c93bf6c8eda", "indicator--028b21a1-6eaa-4571-8ff0-1a9c1949d068", "indicator--98cd7071-0c0a-4403-a3b3-dfe34a8a8df4", "indicator--94a1a77b-9234-486e-96ed-37bfe3d87f6e", "indicator--ff0e8131-bc88-45a5-816e-95bd103cb38b", "indicator--7dc4785c-17e6-4a5a-9eb3-cbace8d314ec", "indicator--a236d7dd-51fd-43a7-8217-3be7741e26cd", "indicator--f880ec67-d51c-449b-b7f2-d5e20d30c83d", "indicator--37c4aa6d-dfdc-47f6-985d-a62505bf683d", "indicator--ff20fbcc-3d50-46d7-a708-542a2a089ced", "indicator--6793f455-95df-4fcc-a60a-b5e31748f53b", "indicator--6539fed7-2fae-481d-801b-0adf367926df", "indicator--0126e6db-3618-4f22-8d58-1acda69b8903", "indicator--85da1427-5c3d-4ba5-861a-6423fd1e8158", "indicator--34b5d595-9cf5-43cb-a63f-71aa624346bf", "indicator--fc8f8bde-5b26-4fbf-962f-6e7d563783d9", "indicator--cdfaa983-72a9-4c87-a513-3e2a4a2cc1cf", "indicator--1848a9a6-c489-4e2f-931b-90ce194e6881", "indicator--28541b09-9ca4-48c5-8caf-b191fbbed18b", "indicator--fe4ea54f-c5ce-45f2-a3f2-e914cfdfc0cc", "indicator--75b4b62f-1481-4dd9-b741-2cd48096696b", "indicator--268f3090-bea9-488f-b793-1d5193418cd3", "indicator--24698bd6-01c1-415d-a341-acbd62bd46db", "indicator--cd46348e-fb18-4735-a9be-9ac160339c2c", "indicator--776e66d4-2727-4be0-82d2-a3a6bf26ddda", "indicator--6060a3c0-aa84-4b96-89a3-29b62bab597b", "indicator--f403ddb0-5f94-4fe7-805a-762fe53a4b66", "indicator--c5c30a4c-fa15-4200-b6b7-6ab504f7fba6", "indicator--42ecd550-14af-45e7-8fcb-1b5186e58a03", "indicator--ae669c7f-e3df-402f-939b-86a743f853f7", "indicator--712a6b34-6730-4945-86cb-a6bb496187cb", "indicator--52c5216b-c5dc-4680-bc85-6a7f1c947b95", "indicator--c4dde306-0790-44ca-b930-6c58a11dfef7", "indicator--b45db110-5436-4082-9717-9560d2766293", "indicator--7522277b-f472-4e1b-848e-fd88a29acd29", "indicator--be507373-7252-4319-8a7a-91ceaa3199a7", "indicator--acd60028-b87e-4b57-8d03-770d865d11ac", "indicator--730c08f2-6018-4897-b612-141b5dabd8b2", "indicator--98d3de86-8c18-4a7d-a938-4a93f02d8402", "indicator--a20378dd-b3aa-4bab-8874-dd623546d513", "indicator--7a117959-82e0-4403-a50b-55e18ad2a3a3", "indicator--bc6ce070-48ee-44a0-88d6-3cb6b9a8052e", "indicator--7750db82-eaa5-4b17-a86b-bb09db0ae67d", "indicator--bf44e043-a705-46f8-93d1-b743f33bc574", "indicator--f2191810-a7fe-464c-a7ff-835f6f60db64", "indicator--0fbff1a4-243f-4cae-b28a-af9b2766cd92", "indicator--50333e91-33dc-4e70-9811-de9b56bbc107", "indicator--d4d880bb-4316-4bad-8f30-8c287ec96d65", "indicator--ddba6135-f940-46ce-b1f9-a32d52b68a37", "indicator--ba5aa485-9375-4cfa-813a-636f79e99ad4", "indicator--fc4831b8-c51d-4382-a88b-d233bd3f079f", "indicator--ea73227c-4e67-4da3-b4b0-820316d9413a", "indicator--287881e6-3cad-43b6-ab17-630cbe3b2f6c", "indicator--697f590d-81ae-494d-88ba-843a086aa72f", "indicator--994c73dd-0425-4a1e-879a-48de2c904794", "indicator--73d384f0-9582-4a70-a568-56ccde5519f0", "indicator--ffdaa294-79de-4909-9277-65592975a94d", "indicator--3fce7c46-6918-4313-a7d8-15ba21e3d178", "indicator--0fd31cc3-fa39-47e3-a2ff-cd3174c73116", "indicator--eda01275-5599-44dc-a7bc-a35b7f8647a5", "indicator--99945d0e-c66a-4b8a-9e36-2b8e7efecbf5", "indicator--00c8a7d2-636b-4dbd-8bb5-87c4b2ec1e1e", "indicator--077fc4cd-9281-4219-840e-81ff182f8c7b", "indicator--3f1ace25-de98-4fdf-9540-27e1ab1bd6b9", "indicator--2c782408-07cb-42c7-9c41-ba7cc6b41401", "indicator--c2558109-83f0-4df3-9339-c27d7ee916e0", "indicator--31301c84-07a0-4129-8ad8-234a1a95673b", "indicator--df0e793e-3185-4bbb-8493-22c690bcd318", "indicator--073e2e61-4e7b-4042-8457-0e7d4053afc2", "indicator--94a76c55-d734-45d3-ad6b-0e10a4a89b59", "indicator--f42d087c-5421-4b00-91cc-677e237c3518", "indicator--22997bf5-ac80-4f1f-a0ac-0aa7326ef9b8", "indicator--05535c56-2199-4822-bfc7-a295bcc78af2", "indicator--b8baf087-2a55-4ea1-9d92-3ef9321dace7", "indicator--b051a6d6-47f1-4c30-933e-a6f3401d6fa6", "indicator--4a354126-d8cf-41cf-a726-75bf8f14fdd0", "indicator--1cf33e9e-37a6-4f40-b23e-d2a4252d6d06", "indicator--6bf83f4f-8d43-4c39-9b01-2d5ec0f2891d", "indicator--d489ef7f-6a07-4682-b3bb-81f0b746940e", "indicator--c411be37-b717-47d5-9d8a-24b3f12ff02f", "indicator--487dbe83-e376-4bfe-9abc-0aea871bec9a", "indicator--ddc2ebdd-aaaa-48d0-8516-47229fa84f56", "indicator--ac014b18-bf16-4dc1-a342-e45e5465d507", "indicator--9fb3ea86-fd6f-482b-b215-0a4592f82368", "indicator--f709179b-fa23-4ec9-9fb3-e0d3cbe14d0b", "indicator--1810c5b4-8303-4dc5-b2f4-b22ba153ab6d", "indicator--fb12d307-f778-4397-9a3f-e343ccc4b949", "indicator--eda6504e-e3e8-4cb2-ad27-67b149a03c1b", "indicator--f801f0cb-3230-4baa-971b-28a291c44b45", "indicator--22623622-d259-4bc7-990b-8c256f58cf17", "indicator--727b976a-14d1-4600-a08d-315c5a7bfda3", "indicator--cbd5ba9f-2f4e-45b3-a136-3b0c83e927fa", "indicator--8a9d75e9-77fa-4567-a072-a55eb8604974", "indicator--4fd31ae5-fcfe-46bf-8da5-ad7f4b2a0852", "indicator--8ed78dff-3868-4c26-9b40-c437625c089f", "indicator--6478029c-701f-429a-a0b9-986c147556cd", "indicator--5c9b012f-2e46-43b8-9d87-ed06eeebfa67", "indicator--acf545ff-c708-4b6b-841d-8526afac8e85", "indicator--16d4cf21-5532-4610-8ad5-a80aba88e071", "indicator--40b4c1cb-30f2-4b42-b0e9-dcc4c1445919", "indicator--b7652f31-f628-4ff7-97b7-2ddd467d7272", "indicator--3104ecac-4da3-45e3-b863-492e0edac8ed", "indicator--fd6abd24-c927-46c6-ac06-0766f2cca147", "indicator--d9ce4ebd-d2a9-48d9-8133-ca63f48138df", "indicator--c1db77ef-bd46-4a03-8913-499ac03ed189", "indicator--0ec831cc-f47e-4377-9ac6-f8064b20d94a", "indicator--1936c617-53ab-4f29-9536-4958f75b860c", "indicator--b761afa1-9182-4563-b232-05d98f29d221", "indicator--29a8ad48-cb13-4552-88a1-9088ac515e14", "indicator--f5656329-f394-4651-8bf0-4c131f829c88", "indicator--55d556a5-682c-4357-918a-e254cd5171c5", "indicator--eafdd864-55c0-408e-a49a-7516f551211e", "indicator--8c174829-9c67-441f-ac64-ea860edd42a8", "indicator--416b227f-9da8-42ae-86a0-d60c7180ea0a", "indicator--ca6150b5-01f6-477f-b0b8-9ab9f7566a87", "indicator--92516f82-9458-4c62-81a4-5347e8042fe3", "indicator--633c4cf5-6966-456f-bc1e-c85347157092", "indicator--90031515-6d6a-44e8-9ee5-b6d09e8539a7", "indicator--6eae2ee5-9d1c-44a1-924e-2f29a463ccaa", "indicator--eb6ec784-b0b7-4510-b596-214e1adf7b7a", "indicator--290769fa-b7dd-4aea-a113-ae062330db35", "indicator--91f8bddb-4b6f-4c3b-81c6-c5b03fc732a2", "indicator--610cbccd-a539-45bd-ba60-7dd7ae82ae46", "indicator--b5443980-223a-42d1-97f0-3e26a7adac4b", "indicator--7f1975c1-9952-490f-be21-10568d7cdb44", "indicator--8b711cd5-fe4d-4321-86ae-f6343f1c3483", "indicator--3f7217d8-0239-447e-8220-ff3515d33b8a", "indicator--42a00a35-6f62-4ea0-8e4c-57ff6af86c14", "indicator--2bb92b84-0fa2-4642-824b-f92c340d81a2", "indicator--e938a36a-cd71-4622-9311-0545c2594143", "indicator--8d220755-1bc6-4b23-a148-728782baa12f", "indicator--4cfd497f-9769-4864-aa38-334d089fe798", "indicator--ce11e29b-f7e0-4026-b8ba-bf005935ce0a", "indicator--2529eee0-a2ce-49a4-817b-4c2da84baaeb", "indicator--f25a6fba-3e08-4080-a3e6-bd7fcce40ca1", "indicator--38cd577f-9008-4084-8e25-c5e5a1d2bad8", "indicator--6ba227d9-3961-4996-8528-d168150542d1", "indicator--d76a628d-5331-4e16-9b95-eb0f7abd1c8c", "indicator--f5d8a0bb-7ead-441e-be30-859952516f4d", "indicator--24af5a62-6e4f-4df9-b074-f2eb8950559d", "indicator--31f1036c-812a-495f-b502-d2e0a365bfaa", "indicator--5ddf9d39-3530-4ef6-a1c0-b6b79f0490db", "indicator--77feb2d4-fda5-4634-b681-74cf54d37565", "indicator--0ea5679a-dd15-4ca2-a6ce-00c8a01a92eb", "indicator--34cd7b54-b3dc-4d20-a8bd-e2f7af663a3d", "indicator--9b38380c-c6d1-4fda-bddd-ebb995e5e2b0", "indicator--8e21acb3-3bf0-4be1-8709-27f58d591f3d", "indicator--00080579-83f3-4b8a-849f-7456f7c4320e", "indicator--1b038e47-ea78-41a8-8434-638cf16ffda7", "indicator--fd36d826-54ff-4ac7-892c-3b137016118c", "indicator--36dbbbf6-2a9d-4474-8f5d-9a0d798407a1", "indicator--cd65938b-9638-411b-8ab3-d03970eb12fc", "indicator--06c6d572-31e1-4056-8fd1-89a62c48119a", "indicator--71c2088f-1539-400e-b96a-fe934800f3cd", "indicator--ecad5d66-939f-4200-af94-efdf80fb0f98", "indicator--252cccc4-0d3f-4bec-9252-5a8021212a1f", "indicator--142db2a1-211a-43f9-b546-1ec21a559f9a", "indicator--0acb9144-7d49-4761-8832-256ff7c88857", "indicator--c4a89287-8c3a-4f9a-9a44-f3b8c392fcfd", "indicator--6968819a-37cd-49c9-9af2-ea51e3b2974b", "indicator--6b00e5d1-5d62-4c6b-b638-3ed1b06f1e91", "indicator--26dfa71e-ae51-47de-96e3-4e1fc9a514a3", "indicator--fccfcc55-1100-44ff-a851-08c1c604ba2a", "indicator--0e8944e5-6737-4ec8-adf5-6737a250c7ae", "indicator--1855137e-d4e8-4442-b9db-7998a41df9ef", "indicator--1a0d92b4-0675-4527-bf3e-532cc33ded42", "indicator--2bb56a64-0900-47b6-a32e-b37365f8f727", "indicator--3ec0ee28-9e11-45e8-8c81-f0e19bb47937", "indicator--79b8d16c-2b46-4bc6-a328-be65c811eb63", "indicator--1e75780e-a7c8-430a-9b2f-4f2d5a9d6568", "indicator--f108b3e3-1d23-4b07-803f-23a4b3259e2f", "indicator--61ea2f00-1652-436b-a39d-bf7f81f5e1af", "indicator--1ec1ed98-db26-4e8f-83bf-f96a91b6cd57", "indicator--fd8ee3bd-a78e-4b9f-a57e-5842d963cc91", "indicator--d3e47377-dfdd-4d5d-9a85-0577a998db3b", "indicator--78c5f82b-7405-48d5-9009-c4a6daebeb53", "indicator--5810327a-bf8c-475e-99aa-e9b6a28bc614", "indicator--233f3f2e-2e5b-4aac-809c-f42b17499440", "indicator--799d9ae3-8fd9-4ed0-ae12-6c89a5eb0fd5", "indicator--4a348241-d674-46c7-9b9a-f9b9a5970561", "indicator--4def7adb-bb48-4781-adef-ca7edb01cdfe", "indicator--b343c174-a03b-42f1-9940-98035e4a5b06", "indicator--e3aec3c9-a23f-4af4-ba7f-babbd9baa5a2", "indicator--06211cf4-316b-4c52-9a43-5e3744e53301", "indicator--dcd750e9-80db-4d47-b7dd-1099269f22fd", "indicator--b457f7d7-9d7f-47c3-b4ea-06de54e83fe0", "indicator--c7c69d95-2b2f-422f-8267-ca332d10c620", "indicator--c45ab537-108f-4310-9dd5-1530e8cb50aa", "indicator--33c74f54-99ed-4704-abb4-2f644a1a1f15", "indicator--e62c07f7-af36-46e0-8e43-54186f43ad8b", "indicator--62661de6-12c2-4d1c-92bc-e6757c5e471f", "indicator--ef5e2cbc-8204-4b43-bed5-61b5b71f9527", "indicator--b4f61e08-70bb-436a-bdc1-989c4c72318c", "indicator--c6ca8e44-6886-4b50-824d-5e4de898719a", "indicator--6101df06-23ac-4296-820c-7efa4bf16d3b", "indicator--3a7f5bdd-d418-4501-bb73-759e3338900f", "indicator--0df0c7c9-e08d-46cd-ae3a-0f5580010d1f", "indicator--0f181f59-67cf-4e9a-8460-e43bb95e8904", "indicator--d76ca7a9-cf07-4806-b2f9-f8ee4f7e9817", "indicator--0f9fc29a-3381-4d2e-9643-e581dd2d3965", "indicator--860cfb4b-3951-40b3-be4f-410f7e66b4e7", "indicator--3490d5a1-cc27-4631-af70-8e91ad7521ff", "indicator--77e55697-6b36-46c0-8265-8969c614ef31", "indicator--549d7d8c-0cb7-4524-9363-0eb5cc37ba6a", "indicator--6407dd2a-285f-4aeb-a777-8caa1ceaad35", "indicator--b552b471-3385-4343-987d-b2de8111f226", "indicator--9feb6eb3-044d-4073-8506-cf41e789625c", "indicator--8aa14942-9d93-49a4-abc3-c633ff525589", "indicator--bdff66e2-3297-42f3-b432-d012149112d2", "indicator--27b82625-2dfa-43e5-870a-0480aa78c587", "indicator--2e0d148f-b357-49f2-991d-af5880c9b0bb", "indicator--27c242c3-2c1f-47a1-b46c-43979f5977e9", "indicator--de57cd06-f9e7-4cb1-8eb9-8c242025e45e", "indicator--f0e7f94e-a025-4893-a140-2c8499167816", "indicator--205f4222-89ed-4851-8efb-9f1b974bade6", "indicator--84d787fd-b091-462e-a259-c46f7658600c", "indicator--f768244c-aeb7-4e00-8995-bbdcb159fada", "indicator--eb81141c-63b0-4ab2-87e8-05752a2e02b1", "indicator--0d26825e-b2c9-4182-a4a5-54edcf762166", "indicator--0660f050-7c82-469f-aba9-352b8c1ba6be", "indicator--ccd64faa-282a-4925-930c-64ac8948bb40", "indicator--cc8bd283-cf2b-4dd1-9d52-2dd298231242", "indicator--75f1b38c-eb66-44ad-bee4-c4f1680a1d43", "indicator--503c1fec-c7d2-4fdb-b037-47d1f60bea50", "indicator--9206b8b3-a5b1-47cf-84fe-f62f2af3d5ec", "indicator--56eb26cb-07d2-44f6-bb37-825382df6f30", "indicator--2a4576db-e0b6-4264-896e-b743750305a3", "indicator--3b14c990-0ecc-4b34-8576-4cdf5bf62310", "indicator--ad54aec8-8404-4287-aeba-b78bdbaa446e", "indicator--7704461e-2012-438f-8db9-f104d06544ad", "indicator--0593ac04-9297-4885-aea3-76ae1367b8b0", "indicator--f6700786-17f3-4b65-ab4f-c22b74e6c1a3", "indicator--45be1229-30c8-40e3-84d2-685a86497591", "indicator--a090af4d-af0f-4b5c-9d5c-610f72848348", "indicator--a34c3207-e1d1-4cc2-a040-eadabb19afaf", "indicator--020a2d0c-cf6d-4481-b6c4-d56924eb3b4e", "indicator--e87adb15-2b21-42c9-94b4-a09e75a9652d", "indicator--750ef63e-184f-4dbf-ab53-2dbd140e97d5", "indicator--15d29cd5-d83a-4de0-8cd4-6ff27fcbd63c", "indicator--6ec33fc3-97f8-48a8-8051-6b86e991eecb", "indicator--7127ae30-6816-4cb8-840b-0c84d240368b", "indicator--4628a56b-4bc4-409c-b1e7-2021f37e0965", "indicator--4b04d7e1-6ffb-407e-91f9-0d3317ab4ecf", "indicator--36866951-36e4-41ed-a3f8-078b693b3e71", "indicator--70d90071-874f-4c54-94e0-d671a057f2cd", "indicator--fe4a40ab-0c5e-4f99-a432-b0bd444815e0", "indicator--e01f4410-bc40-4c10-982a-e45354253f92", "indicator--b19e4d19-eeb5-4739-a5e9-bb5db2094ea5", "indicator--240e4dec-6bc5-442a-8611-edb4f1dcc5c4", "indicator--b393caa5-4a2f-4915-97b0-df762bbd61ca", "indicator--9e64cdbc-3a99-4562-852b-f715c89dc997", "indicator--82deee6e-313e-4587-9a50-4c2990427cf3", "indicator--44da0825-5d79-4cbc-8176-4385d80808f8", "indicator--585f68a6-382b-445d-9526-81e24bfc0859", "indicator--d37f93a6-d6f4-4c8a-b31a-a1bf90bc505e", "indicator--3a6d16b3-f243-41ac-819b-dafeb68aafa2", "indicator--ebbb4628-19ff-476e-b610-529e0047820e", "indicator--312eb5bc-7ad2-451e-99ed-0ae93398ac69", "indicator--6404abda-cd4e-4e06-a8a0-fcadf651306e", "indicator--4350ea36-4130-4cc3-8b90-f0c9000fa71b", "indicator--5e5f1a81-76f4-476b-a5ea-bb62249535ac", "indicator--32eb9d0b-f14a-41a9-835d-8e0528be8bb4", "indicator--5fa03ff8-3912-41e6-a698-f9e43472c320", "indicator--f9256337-7fea-4f03-a91b-d485d0fe8643", "indicator--c7a20bc4-3c0c-44da-bd10-3ba6ec7370a3", "indicator--3d28335d-805e-41aa-95c2-758238bc2c6a", "indicator--753d4a66-3134-4b00-a767-c67b59f98d6d", "indicator--32053d02-c49e-4693-8587-e6899c13b7db", "indicator--b0018002-c37c-4765-8383-8e81d210d528", "indicator--f0386d4e-eb7b-400e-a5e6-2b43c43d84ee", "indicator--cd8826ac-b09b-4a36-bd88-75acaf143d96", "indicator--6df5160d-5326-4410-b050-32cf1219ac05", "indicator--5b69cbde-778e-443b-8988-1267797213c3", "indicator--e834a7e8-2ada-48a3-9b62-e8730f791a9e", "indicator--e27057b3-07cc-4b6b-b099-e01fcea33a0a", "indicator--b07bf9bb-ee16-44ee-84a2-3290de8919bd", "indicator--9499c31b-61b4-4e23-8e5f-a95e2c7c638a", "indicator--e9bce579-b2f7-48c2-8791-8c410c39761f", "indicator--24619267-a39e-406f-acd6-01c54678cfd8", "indicator--dc6ec069-583c-4dd8-abeb-fd12d61f4268", "indicator--2bc3db73-1adb-4145-93ff-cc7aa9e9616e", "indicator--d07a1e6a-4c24-4b35-b139-fdc3704d220f", "indicator--2b264ac1-afd1-46dd-8ab3-8f9310477d9f", "indicator--5d33dedb-d267-4aba-899f-e7fb545950f3", "indicator--30ff2fd5-4881-4ea0-9e18-cf59879a890c", "indicator--b7ddfb48-425c-4386-a4d5-95598333552d", "indicator--b5448c9c-4d23-44b4-b60a-d8430e868b4f", "indicator--ec000135-7a1e-4194-914b-bfa3b1ee0e74", "indicator--5539128d-b013-414b-806f-f1d1834a635f", "indicator--f0da0ed3-cc3a-4e2c-9a0c-22f71bbac8e0", "indicator--6a3a01c2-79b8-486a-8ba7-43d273aa3688", "indicator--435378c9-4563-4d72-ac8a-2643cba9916b", "indicator--5a3849e4-7c68-452e-8535-8f55df9b81ed", "indicator--f4e6d5f0-4819-4ced-b1b6-71a208db271f", "indicator--3a4b420c-143b-41fd-85da-633c121ebebf", "indicator--35431171-61ae-4baa-a04f-458f7a0d2a23", "indicator--210e6d6c-1cad-471c-91f5-058547413386", "indicator--25e29778-cf28-4487-925d-767727940419", "indicator--e4df44ed-9cab-42ee-9610-90762b0bad35", "indicator--8ddf4091-0efd-4b93-bfce-9cf4677849cf", "indicator--5270b702-3f55-4b9f-83b0-fee73e4aed16", "indicator--22f36a91-b285-40dd-808d-db607317535c", "indicator--1a92c45f-2ca5-4de9-b7cf-00f0e1570b32", "indicator--67516aa7-e7e1-4f17-844e-29d8e448d6da", "indicator--e9f94240-9e15-4edc-9e1d-807bb5a70a46", "indicator--b6367400-f3b6-49cb-b017-0e5740cf21bc", "indicator--b12b0fea-7600-491b-83ef-dd5beb8e9304", "indicator--d090c9b6-f189-4008-bca0-7296d93688c9", "indicator--5a836e28-7577-43ec-ab28-11c69be46cfa", "indicator--41061c60-bc50-4a80-8135-a9b96ebdaf42", "indicator--9462b617-31aa-40a6-967f-3a7ebaf4c16d", "indicator--517f71ec-7e3b-47d1-882a-9ca86bc47374", "indicator--c70d3702-5cf9-4430-bfad-69e5c587097a", "indicator--83494e9d-eafb-4b79-add2-94e2c14d9799", "indicator--347bb2a2-9364-4fc3-a655-c68775139b2e", "indicator--d252df39-7fe9-4a4b-9c58-1bdc93393ecc", "indicator--088de312-4092-4860-90ee-53a0d363db96", "indicator--89f33b2b-1baf-4375-b676-9b79927b8572", "indicator--877ce491-51d5-4660-b287-8b5c33e62c8b", "indicator--79679e1e-eaeb-4b5c-be9c-c3e7adebe36b", "indicator--90141e98-3660-415d-b420-027212290cc3", "indicator--c265c3dc-bea6-4a52-9db8-5388f04296bc", "indicator--21180bb0-b22d-43aa-a9c9-e5459a4afe9f", "indicator--db5719e9-4470-46ac-bc4c-59c3fb0f26e7", "indicator--4cbcdb5f-c48f-4752-bc5e-402a392222b8", "indicator--c23a55cc-b0a1-4d4b-8f45-58cd484299e9", "indicator--2297b56a-dd9d-4907-bae8-85c840db720c", "indicator--bb07a9fd-4aae-42e6-87b9-74e22e142740", "indicator--c02260fe-eef4-4d23-929f-d802b15778df", "indicator--5081ea05-5d6b-443d-9fd9-55aa989f6fe5", "indicator--13b9b572-10a2-4557-b5bc-5f3b0326d9b4", "indicator--d4f7b7b3-9576-4474-ab33-a1be7c09ec07", "indicator--6609f73d-c9f5-4260-8ed8-334420af66c1", "indicator--f2e6ca57-070a-4de3-beb7-b4fe86ffc6d3", "indicator--1b5a0fae-eca6-4ca8-947a-fa0c065c08da", "indicator--f0a91012-e615-4b01-80f5-45023805bd93", "indicator--f72b39eb-784b-4a4b-b465-f948add84808", "indicator--39b51a6a-3b00-4eaa-ac89-29d48956225f", "indicator--c78bf276-5d68-4512-95e5-48124b816ca6", "indicator--26ed2e75-d800-4b10-8e9e-b995f1055ab5", "indicator--5fbfe27d-64f0-457c-9171-010402673fd5", "indicator--0518b6a2-e79c-4b07-a9f1-1a2ef7de9483", "indicator--1f7cbc68-25a9-4838-8de1-23e554e33601", "indicator--e97ffafd-dddc-4b88-8fc9-ecb9162b0656", "indicator--7106a59a-4ce9-43dd-a306-cd84e54f2e88", "indicator--67c8d182-e03c-4100-8867-6043d9f6ddd7", "indicator--fe51ab85-91fb-415e-b885-5813293eec79", "indicator--6903d8ce-3425-4fc4-8494-0aae54deca5a", "indicator--b8fe5c12-3895-4be4-a81a-1a554ae61981", "indicator--c8611cdc-8b2e-4b23-b568-eeb8d75f419f", "indicator--78ab2c2f-5155-4e8b-9ce2-f66386fb6338", "indicator--f1ca5e86-5c39-498a-b3a3-ce7f272cca55", "indicator--2619d3b8-121f-4579-90bf-16379fa7f752", "indicator--9c477537-42be-4d02-ad6c-c7dc1dc7d4a3", "indicator--b9178b96-4752-4867-b29c-62905302a19a", "indicator--a35b33b9-0c9d-4e05-814c-5ede87f78363", "indicator--f9ed66c6-d8eb-46c8-a6e7-715d6b9ee54a", "indicator--2cccf482-5803-4a20-97e2-bd67ece01d51", "indicator--7f35285b-c009-4564-b159-c5d7186b3946", "indicator--0f908238-ab9b-4a45-9d28-3e456b3fa417", "indicator--a18a51cd-385f-403a-9449-191705d66fd2", "indicator--a11bc4ea-5f01-428e-99a1-f56e3a18fc9e", "indicator--cd7a3b93-93c4-4bde-b030-1fdc12461ea5", "indicator--040c70d7-a089-454d-ab34-5c9fef97159a", "indicator--22636fd1-d910-4810-8bf3-d6990bd78b16", "indicator--7fcaa6a1-e136-4a4f-a2cc-5f90b7f609d4", "indicator--f1dded43-d469-4776-a9d8-876c7c1642d0", "indicator--7d144ec2-1a1e-4c90-bcce-82a94ff7d03e", "indicator--bd5db0da-6077-4666-ae50-932b5070f781", "indicator--3e610409-2be1-4cbb-9204-0b2c0732c0a0", "indicator--c48ce7f0-44fa-4b3e-8caa-c01a6a8c56c5", "indicator--845ee3e4-6f87-4dbb-a7b6-4c47b7ba3c31", "indicator--de93ec9e-1b86-4586-9924-527f3a4dd4fe", "indicator--6f83bc2f-8a46-4460-8c18-7fa46731fd34", "indicator--2fbc5a53-e22c-4b34-b22b-6d551b66dbee", "indicator--4f4e795d-1826-4d49-b57b-43ba93de282a", "indicator--0ba93a2f-840b-4581-a261-30b9027d3fac", "indicator--7e6772c5-cc47-4680-9bf3-bc1c2aaed0ea", "indicator--41253c4c-c08e-44e2-9e56-3a3368de5a6b", "indicator--57bc7e69-cd7a-4fef-870c-c302fb6d9518", "indicator--5ac786ed-aeea-4332-9cc5-bbf40a7e4806", "indicator--a514fbc5-6281-4e9c-a69c-b48b2fea3f42", "indicator--f3adac1a-8cda-430d-8afb-9c3d4ef3986d", "indicator--1fca0a09-6278-497b-ac9c-3576fda4c5ec", "indicator--9e1e5a66-ca63-4b9c-9159-2697eea58b40", "indicator--438ce58d-9086-4916-83f0-9b24938abe4e", "indicator--4f1dbe50-5aff-46b5-9228-c973f6181d13", "indicator--99721726-f0db-4250-af0e-8c78d876eb91", "indicator--f190f316-6269-4bd4-b1d5-7a7f2592908d", "indicator--c4d10ad7-8c57-4015-9858-7893620c9cf7", "indicator--a65050f2-68d6-4723-9356-192e6363ef76", "indicator--9ab17be4-5aab-43b3-8524-5a2e4a393c7a", "indicator--a53ca072-9b70-45c1-9697-a91718fa5bdc", "indicator--a35a9686-da68-4f8d-af74-538c42bad396", "indicator--2c374ad4-4537-4a62-9c36-f483c00f38aa", "indicator--40749676-97e1-4f18-99c8-a867cf4849b8", "indicator--10a34483-3730-4381-abfe-25fe37f9b615", "indicator--f4df722f-6909-4cb6-95f3-0eb817c56863", "indicator--9c702681-0561-4424-be09-51a13b06afe3", "indicator--b24863db-2a41-4d26-8af6-279b66cd893d", "indicator--12a489c6-e2f4-4a89-895f-8d1c17eeeb59", "indicator--7e584c86-40e3-4927-b2bc-f5bb5a1f38d3", "indicator--15eaf881-e3a3-4258-abe2-1e68f878797e", "indicator--77e90a68-4f3a-4f33-84b2-55bd7e66e342", "indicator--59d0f929-8dff-49b8-aff5-3284f5bd808a", "indicator--049f9321-b629-4a30-a823-0d5885bdbbfa", "indicator--4fa70cee-a2f6-4eae-abc8-2be8d433f6a2", "indicator--abdd54c2-ba9b-4508-a4c5-b6146a29dbfd", "indicator--248d1fa7-be33-4e82-945b-466fb0bd60d5", "indicator--579d8947-e422-4334-8ca7-cd347ebb08c3", "indicator--9b0bb508-e120-46ee-92e1-390fbd26053e", "indicator--8e636977-8cab-4259-8221-2213e18c8c71", "indicator--1a579526-4465-4692-8964-79fe80394026", "indicator--b68d9c28-4393-43e9-b768-cb03ececf6f6", "indicator--f5a9bb7a-a8d3-43d4-a2fd-c8f020b7c8f3", "indicator--e81c0c66-4831-4b08-b064-4592329dc5a1", "indicator--18cfbc0e-596c-426d-adae-2ef863a9b2c6", "indicator--333e7887-7f1b-4c2d-b698-92e2c311b05b", "indicator--29685180-a1af-4ff2-8af8-2f4160c8f6ad", "indicator--5312af17-bc54-4a1b-8561-91f0488cc330", "indicator--a3dbce54-76f8-43da-9d82-51f165bc9cc6", "indicator--956f9ef1-b165-4af9-a89a-f5b90fb13a57", "indicator--d490a245-ca7b-41e9-9e3f-528052c87a15", "indicator--534bc0ff-c1d3-4b19-b340-ca43eeea8d46", "indicator--8e93bc87-7a52-467c-8926-e7c1f71af4d2", "indicator--9179589e-4581-4d11-b261-fa5d0e28f344", "indicator--84d3d32c-9a3d-4a49-8035-e5293cab2ebd", "indicator--6ab18ae7-b5fc-4c2c-94b4-dfbc063e80c9", "indicator--af1bb86e-cda8-4a49-9ac5-c6b960ee0663", "indicator--4a668cb1-5112-472d-8d7e-a98bbfa965f9", "indicator--eba36927-8c74-40bb-a24b-45e706a54820", "indicator--69e864f5-0c36-416c-88ba-e9141719d35f", "indicator--8915d884-8fd4-4ba5-8693-2800ed842315", "indicator--28a918cd-3e56-47ec-a705-09815ef0cb30", "indicator--3c81c41f-d340-4e01-a4f2-aaf61a4d62b1", "indicator--88fe772c-ba4e-44a1-81b3-628f6b3507bf", "indicator--6809d978-a458-4d2e-b5d5-da46137d6a2d", "indicator--b262de9f-36a6-4cb8-90a9-d74d35f6f766", "indicator--c1425f8e-06a4-44d4-9f37-bdbbc89a3c57", "indicator--40a5a9a2-0e18-433b-bdca-2347891ed4c9", "indicator--a0f3a30f-d08b-41f4-940d-896b44f46858", "indicator--d10d3764-74f2-49de-aac2-28f8f3f0addf", "indicator--df6afff7-b0c4-489b-af0c-a7a2f57b9ed5", "indicator--6b75a729-c832-4ea7-90c2-d429ef527bf6", "indicator--cf044a59-66fa-428f-bf15-9eba3dd5d2f3", "indicator--e121ccde-bf4a-4c18-bd31-1b55961385dd", "indicator--116450ad-7ef0-46f3-883f-8535f3d9e579", "indicator--fa2c6eba-7fc7-4e0a-b5b4-546b4cdf4667", "indicator--33b34edf-47ed-4943-8374-399b753af209", "indicator--c93e91ae-e00d-443d-b8e8-7e9d98caccd2", "indicator--4ca88eb5-dfa5-4f90-98e8-451495c128cf", "indicator--45b91bb5-e0a7-41e3-959a-5c11aa7fd507", "indicator--3133bd5f-f632-426a-8946-d3dd8b14d8ad", "indicator--769c2321-da18-4e29-b884-0171d08e64c2", "indicator--8d1404fc-6cd3-4f77-9e9c-8334083558e3", "indicator--981f85a5-c3b9-41c8-a3e6-cc29291da625", "indicator--951f2160-59d7-4008-bb97-b6087a6cbfc2", "indicator--f1d4983c-9bd9-4057-957a-d1f2f8bf2748", "indicator--f1e379a8-d566-459f-ac29-338f8bb8e99c", "indicator--0caf5f58-ebdd-4747-83c4-3c005938dbf2", "indicator--972d7c85-4818-4ba4-baf8-1e0c47d7cff3", "indicator--9de70e4e-f37a-43a8-888e-3532c36c6145", "indicator--c5e32dc4-a07d-483b-9301-b494501bdfc6", "indicator--6ce27cb1-6ce0-44c7-a043-37ccc6842afe", "indicator--1e47b6cb-becb-43d5-893d-b9477489cf0f", "indicator--5cfe2ceb-b28d-4717-a2f6-95005acc0cbd", "indicator--e7e657ff-8e04-485b-ba3b-ac59a215b8df", "indicator--d7429c65-48e7-4acc-b675-94401df72997", "indicator--fe3aac41-488b-45c1-878d-a864b6ba4056", "indicator--327107cb-6741-45dc-bff9-710dc88d3701", "indicator--ed0a3edb-4319-481c-864a-c14e1518bc73", "indicator--1c5eab79-49ad-4ea9-8de2-e91b65e51345", "indicator--7a6df98e-8687-4dfc-a493-19d03fadd12b", "indicator--be6b22da-a9bb-404d-8e3f-cb8359415ff1", "indicator--b59c0827-3584-4da8-837a-b6fc470af458", "indicator--b9ac7189-5ba2-416a-a32b-4a0c6d459713", "indicator--22f9db49-38b7-4549-b6c7-293f034314f4", "indicator--c90175fc-370c-4819-82bd-490ebeb0bf63", "indicator--00768a94-1bb9-41fa-ae40-f0719b6dd75a", "indicator--8146aca4-2d84-4296-a872-9d9f8424f8c3", "indicator--e2902a85-e3c2-41e5-ad55-7d3003458b24", "indicator--aa0dee3c-42cc-44db-8afb-a10747935e03", "indicator--cb0da0c1-be0f-4b44-8c09-837c6f700358", "indicator--bda1cc16-203b-41ca-9fd8-ac59fd2a6f6c", "indicator--c84d2bef-3921-4069-96b4-420a4b8d464d", "indicator--0dc1b380-3bca-4453-97f2-7fd47265464a", "indicator--ec271ce3-c66c-41a7-9b7a-7ad5075bd926", "indicator--9ca3dc50-2f31-42e8-9a23-440d07ebeed5", "indicator--526792bd-9e03-4129-b3a7-1f7165483494", "indicator--5f2d94ca-2f3e-4898-b515-7a9ed911b4cb", "indicator--b335d487-575d-4c47-920d-115b6a4c452b", "indicator--c43d01f8-62f2-4cbe-b9da-f5e5197f9ebd", "indicator--061dd6d8-e56a-47f8-b61d-952836459a37", "indicator--8658a168-dd4a-495d-ab04-61ecf7a658f2", "indicator--333aad3e-eb9a-4bbf-9f46-7cb86985062b", "indicator--111564d3-6c4b-4dda-895e-10ccc555e23f", "indicator--6f5743ac-ffe5-4ed8-a624-c75a0afa8ad1", "indicator--74532275-d661-4b32-960d-ec92f1298702", "indicator--04a4620e-ced5-4d1e-85ce-fda0f4a558ca", "indicator--c22afead-eebe-46e8-bdd1-1a771a7691ee", "indicator--251464ce-cfbb-49c1-8c52-750e55e485ad", "indicator--c0eb28c1-4f2f-46b3-b027-7d4b071aa15c", "indicator--0f524aa4-df25-4a39-bcd9-28e3aec2c756", "indicator--283c352b-19ed-455f-93f3-a6e5670b3e99", "indicator--3f12b25d-6d38-46ae-b2f9-fbfd3c03cedf", "indicator--2414fc90-738a-4df5-9d1b-d68bdaf2f1a1", "indicator--41141c5f-2750-4ea3-b9f7-b422195f03d8", "indicator--cd5d3a3d-752d-4f7c-8670-7b0b9e65f8dd", "indicator--1290e72e-f601-40ce-beec-8b967c6f97b1", "indicator--bef0110b-7868-4faf-8ad8-bad74287ec49", "indicator--b1984155-9b0c-4f7d-84b8-9c9420341c29", "indicator--2e235424-5a68-4ba4-ba00-5e083346bd81", "indicator--6655d268-4218-4bcc-98b3-d8471249c43e", "indicator--b905006e-dd05-45ad-9b3f-5a0b30053d71", "indicator--8900e563-963d-4079-81bc-fda53cc75feb", "indicator--911e0314-c6b2-46b1-8324-fffee38c084a", "indicator--96fb885c-55e6-407b-ac29-767057ca430c", "indicator--6d16302f-a5aa-4e64-980c-943aa19746cb", "indicator--40e53159-f8a2-4c48-9666-68b39236c43b", "indicator--b461f93d-7a52-4693-83c5-088257425ce0", "indicator--563185c3-387d-4298-bc41-6b8b81640b24", "indicator--139776f2-2a1a-4450-9a8b-c8c59c93189b", "indicator--54fe9e17-8d02-4bb8-a0c7-b0e31b5a19e1", "indicator--28aa22f0-928f-49d1-81b8-a7f1c59ffba3", "indicator--d4620024-82b9-408e-9b66-536cb3e1e049", "indicator--cfed08a2-dc37-4908-a3ba-2ae07ef78bf9", "indicator--93ca4d82-5217-488c-911a-33fa1dc9ca2f", "indicator--b0dd02ae-654d-44eb-b784-d936b3e59d85", "indicator--15ba0a15-59d7-4ab7-99ea-58b562850c78", "indicator--e6ab6d96-b3cc-418b-8424-2cf2ef07b10a", "indicator--db748e13-3208-464f-963d-6b23f53acd82", "indicator--e9d955a7-8009-41f9-b362-a0baaa20f776", "indicator--43e43e5a-7168-4421-9027-eec7e106f139", "indicator--9da3b750-fe34-4611-8ed1-66f656b4f56d", "indicator--6d103f21-d483-4a92-9eea-241579f54f7c", "indicator--6f7b366c-b7f3-4067-8288-a91b0f28bb7e", "indicator--ed25e3ad-e91c-4cbe-a1a6-5bcaf19c14cc", "indicator--8fed7b5a-9de7-431f-aba3-5d13fb0a1867", "indicator--10938e83-3624-4402-9655-fd0ea690cb4f", "indicator--7874dcb3-b550-4462-a4e5-3dcdc016e476", "indicator--9c4f7ee7-5611-4dc2-8a28-3c81e0687571", "indicator--9be4b6d3-ee3b-435d-9320-48c32fed22f4", "indicator--f1828e08-e680-4a73-beb8-c36d4fb4b845", "indicator--3232201c-bc2b-468d-9423-b9c398a00e12", "indicator--d7448bf2-4473-4c2a-8c86-e6d79c061636", "indicator--f93847d7-c85c-4f1e-a3d5-83fecea27cb1", "indicator--bce46c90-2302-422d-90cf-b8a48de2d0ab", "indicator--307affda-690b-4dc8-8686-399c0a2e751d", "indicator--cd86e6c3-a952-4d3e-b2b8-0caee43fcfb1", "indicator--8af1e20f-e0d2-4f5a-ae06-b5a9b4e92e36", "indicator--b1791279-715f-457f-8f1e-1b0e5b4d898d", "indicator--758f7914-2d51-40ee-b1cc-7c0f535f65ea", "indicator--61b3c359-0cd9-46bf-bf3e-4763661b85c4", "indicator--717ea43f-2d8d-4929-b215-81e2b646f95b", "indicator--851ef53f-8c7f-432a-8e7b-5b470a29ed41", "indicator--cd5f9b9f-88c0-42e4-a54f-3a6f313fdb47", "indicator--0a92a9c3-97b6-449f-8122-cc823f44a819", "indicator--4c78ad84-7dca-4de4-a392-a098a3148402", "indicator--3c01c9b3-0278-47ee-98d0-26a946ca1f9e", "indicator--e996e781-0e8b-445b-a3d2-729c31dc31d8", "indicator--883a2c10-0603-473d-86d8-5b19ba09de14", "indicator--a889721e-538d-4b77-89dc-ee938d49ca4d", "indicator--a53cdbbd-ba7b-4e5d-bb1d-f578344af2a4", "indicator--41bdd5aa-b727-41fc-b881-38941f0cbfe7", "indicator--cae677eb-f401-4404-8472-2543e447e308", "indicator--2d56ce6b-34f9-4a34-acc1-32b74cc44000", "indicator--3f9b7823-a687-4d0b-a512-e18d53073f2d", "indicator--0d0d4766-57e6-4096-ab71-725acf28bd2c", "indicator--3ed369cc-8473-4753-b4cb-31288c4eb237", "indicator--6f6a5757-7560-4aec-8a96-41a01f469acf", "indicator--39a61e60-9295-49d1-9435-2bcbe2f380ba", "indicator--5270b03a-c656-4e3b-9d63-4f0154b59817", "indicator--bb5db3cb-bd88-4f07-b19b-e84e9d311bc4", "indicator--db54a7e9-6694-417a-b0b5-776406f28488", "indicator--d1578bdd-18f6-4378-b335-4766f458d6e6", "indicator--a586494f-6347-43e7-af91-f573b68fcc65", "indicator--7b51b2e1-019f-4982-98b4-0a64d19b6af6", "indicator--1fec4be7-a3b3-4efe-a5fb-d8fbb91f55b4", "indicator--7360b663-d55e-4d5e-8054-985bdce0937f", "indicator--a4c78f19-cacc-470a-8536-d344a6e1b437", "indicator--13ca7a84-0e4d-4433-b122-76425dd4f954", "indicator--601f238c-630b-4e54-bd4d-c65db0509319", "indicator--d137df40-6bc3-40d3-aa6b-883a7a627fcc", "indicator--069853ad-8a01-49cb-a9ee-2c27b036edd6", "indicator--0d745c5a-526c-4554-a238-1864883a9e1f", "indicator--924d4819-6fed-450f-a391-a4ff57c0ca58", "indicator--3cb6b841-b708-46a8-991f-876ca3000b8d", "indicator--87eadca8-90ce-4088-bbac-b71a20aa804e", "indicator--d3dc2578-fe40-475f-ad1d-c96fb5e0d8ba", "indicator--1667c76d-eee8-4133-80aa-f0fa52206eda", "indicator--6065efb8-7e85-4e68-b59b-400fa76e5d4e", "indicator--9a6d1eb3-c4ee-4e8b-8d52-8f037284453a", "indicator--63df1a37-b5d6-445b-bd4c-42173f206b3b", "indicator--0a03d561-f3dd-4ff3-8e30-61689ebcc225", "indicator--2cbc56de-f8a2-4766-92df-e774fe2aecb6", "indicator--c0321e1a-c9da-4cd7-adfc-cf4be55ed64a", "indicator--30506fb0-2a2c-479f-ac27-abd4973c9597", "indicator--87ee0f97-8c2b-4c9d-a0f2-28a34eaa0ca5", "indicator--73256f58-3500-450d-a3f9-938742b8934a", "indicator--0ed97821-3c2e-4cb1-b078-8fd0c2648439", "indicator--a7ab60c6-f58e-4ee8-871d-51bba81dc804", "indicator--5b8efa49-a643-40ad-bfd3-1964d56d7260", "indicator--6cc4e12c-0bad-4cc3-a3cb-b398ebbc5b82", "indicator--508bacdd-6c8f-4a5f-9ee7-3998594a3d3a", "indicator--218420a8-cfd2-44f1-a009-51075f3067fb", "indicator--3a896d56-600e-4264-b9a8-19dafb994713", "indicator--5d3a7e7f-7466-4bde-91ec-8bd3e732287f", "indicator--acea9b19-45c7-473b-a26b-a0049478a7d0", "indicator--8cd7715a-08d6-4752-a9cc-058781fe02cb", "indicator--99921183-59f5-459f-aa43-9231201df3b9", "indicator--e1194fd9-81a8-408a-bb4a-5858e7385b67", "indicator--d1dc3880-bff2-441e-8219-6b3e2c4d07de", "indicator--2054d253-bbe7-4ca0-a61f-4904b8a0af22", "indicator--398384ca-96cf-46ea-9ae7-7dae61e1e344", "indicator--4877d205-fbcf-4c13-9e9b-c5771f0659f3", "indicator--cfd5919c-3ea4-4e9d-9da8-95366812cfbd", "indicator--b0dc4d25-f327-47a8-8375-cf46fa467d97", "indicator--96604d19-13b1-480e-ade7-7db12565b921", "indicator--2a97ab88-93e7-431e-afd3-9ff8dd1a0569", "indicator--56318b4c-6a56-467e-9d8e-b5e201eaf162", "indicator--12f03c25-dd7c-4e0d-a2aa-2dca2713646e", "indicator--e25603cb-b178-40e3-8bed-52c21c1f2736", "indicator--c0ea4f65-36bf-4b91-9133-a7f254160134", "indicator--5693beb4-b5a9-4d4f-86e5-714477e145b4", "indicator--d412e728-cf26-440f-a890-f14107831286", "indicator--00310761-c96f-4464-894e-1001e3cc828c", "indicator--a82e495f-21f3-4c6d-8ddf-89dc7f815c0e", "indicator--b7880d36-09ac-4c10-a900-e216a9b1a180", "indicator--e1b78f08-916e-4633-9b37-8ed97ee46315", "indicator--29617e5a-3b3a-4508-b3dc-58d36452b741", "indicator--c9c9a7e8-6d8c-46d3-b953-6498830bccda", "indicator--c6789a14-bc6e-4c52-9f34-24076ad35c81", "indicator--da9c26a7-93ee-4da2-ace0-a8ad119dfa9a", "indicator--daa1a140-0846-4650-9420-edd209566284", "indicator--9072491d-70e6-4a5d-85b9-b405d76d8a11", "indicator--48db4452-d8b7-4aba-9954-014bd7b556c1", "indicator--5c4dd6fc-8388-411b-bede-ea42fd6940dc", "indicator--47e19953-dc87-47c5-afd7-0f5a214c3d31", "indicator--a7f07dac-63a3-48fa-95e1-98e2697ecd2e", "indicator--2499846b-21f8-4a6b-8ce6-746b7a2291ba", "indicator--2f15cc54-326d-46fd-86d0-d93df97faad5", "indicator--9fa6711a-65b6-4f31-a1e6-0f1c9278a7b5", "indicator--df52c0f9-6b7b-47e3-9281-40bce1ce62db", "indicator--63150c56-2229-4a79-b0c0-8a6a3a3e150e", "indicator--492cc25c-5106-4e36-ba0b-4568380add19", "indicator--225cd763-914c-4141-ac8b-92a69bef0d11", "indicator--adcbb87f-933f-4bf4-b311-9b1fed8b740e", "indicator--3036b52e-0fe3-4807-a6ad-1ff495673017", "indicator--8bb02dff-9ad4-4e8f-807b-53718471d879", "indicator--bfd45916-9738-4a89-8d83-f42a7fbb20f8", "indicator--ed1d5e2b-0246-4185-83e8-e10e0539e328", "indicator--84a75e74-a465-45bf-8365-bb3e977bbaf8", "indicator--9556557d-2c2d-4105-ac4c-d6a8c3315163", "indicator--ff53d4d8-9f87-41a2-93c5-cd5f8cd8ca80", "indicator--2782519a-f853-4e72-931f-8ee215874bea", "indicator--3d158249-06af-46d0-b43e-7017124f2b56", "indicator--3cf99d3d-39cf-492f-a308-f9f54d01892c", "indicator--fab15798-0f58-4d62-abe0-684bc27932a7", "indicator--25b07273-bb84-4087-8d36-224389e63996", "indicator--09b1e323-b94a-445f-b8f6-0bf253fc4466", "indicator--85ee694f-972e-4de6-9c10-8a492ca5b228", "indicator--a7aaac99-601a-42a6-a3d3-5fa38e0c7412", "indicator--97dc0188-2f73-4283-8be6-9dbec7522323", "indicator--5867bbb1-df3f-4004-9580-eecbb40c2e8c", "indicator--3b42c437-088a-42be-9935-6be0487f4235", "indicator--70899a53-e284-4e68-8887-702749c47071", "indicator--16113709-0fec-4fec-9d86-4e2b667f06d6", "indicator--63297e0d-f823-491a-80f6-46b137e431bb", "indicator--e9b817c7-fdde-41ae-8b61-2922fb47f473", "indicator--15662f56-7a90-4089-a96b-a21b8ab4a65b", "indicator--9713600a-7721-4c65-980b-beade325e51d", "indicator--f5b86862-d1c3-47f3-bcb6-4839a9a81527", "indicator--63f603f7-5601-44a3-b045-662aa1bdfe95", "indicator--71ffd9ed-4c69-4d5f-9598-72a4c0926ae3", "indicator--b47ca6f5-cfcd-47ae-bc22-d48410c79917", "indicator--b7758682-a338-44d4-8305-69000a99c5e1", "indicator--379d37a3-5794-4f79-8e02-b1962c837639", "indicator--3e5b49b9-a5b1-42fd-bbf7-ca66e0949290", "indicator--a871dfef-a274-49ea-a358-680181b4b0b6", "indicator--f96938b3-4865-414e-b7e0-7d55e1f6daa8", "indicator--a975b329-9d67-4780-8803-bfe3d3a1d38e", "indicator--b8a8f6e5-f5dc-4af5-9bb1-638f1416e0f1", "indicator--efbd1864-4f49-49de-9df4-bcbc09eab73a", "indicator--edaebd11-812a-45dd-81ef-e7d7f4151910", "indicator--ac7f90ed-1265-447d-9ace-0a832cb6bf58", "indicator--244989ae-fd36-4ea9-a7aa-e419c650841b", "indicator--4ebf2ca1-58d5-4424-9971-4c1102677b5b", "indicator--ce6b8a99-2e3d-4673-8cdc-fedfb3416889", "indicator--5d023862-67d0-4c44-a1c3-395a92db5aec", "indicator--a6c61fd3-2db4-4e12-887c-ab85adb47064", "indicator--6317d670-8fc9-44f3-aa23-3f6ad496cb14", "indicator--15b80514-ec8e-4220-9c78-080b952add3c", "indicator--43d6719f-0359-42d7-8a83-1b7fc962b71a", "indicator--041c06f0-1dfc-4118-9c4c-100eb0e94d51", "indicator--95ab7d9f-eb26-4bc9-9e0b-1f5bdc7472d2", "indicator--31805f85-2a38-4183-af3c-77cf4bad480b", "indicator--30f3f6fa-5040-4642-a50b-6ddf66a937c7", "indicator--ceea20ea-4ac4-40d8-af4e-875c1aa3b639", "indicator--20d3683e-b09c-4e92-ac9d-9d9888961dac", "indicator--0655b3f1-46e0-4310-9a26-dac61a9764bd", "indicator--fd165771-14e6-4c07-8090-f1b30ba8c0f6", "indicator--67591ec0-8c3b-411e-8411-af32ed295f39", "indicator--393c332b-00d6-479f-900e-30c341a46e12", "indicator--2884bede-4f9e-440b-b6e6-1adfbf1287f5", "indicator--aae0d5a6-098b-4624-a8de-5ae32dccfae0", "indicator--9b8df294-4e01-4ec5-b2ec-863c877a7dc0", "indicator--a35c1280-5a29-4ea2-bc34-f2b2cb81913f", "indicator--df2103cd-bf8d-4cd9-91e3-f4b867c6e360", "indicator--689f1e7c-6ef1-488b-93dc-a6f4d10d5132", "indicator--2854e7db-ede1-4a90-9bc0-9a1d0e94b19b", "indicator--6f6ad245-e4cf-4b0e-805f-7fd808f72417", "indicator--50f53151-04ba-4cc7-8c2c-92035d543c33", "indicator--58aeb90a-4861-4d13-bb35-bbfeca706697", "indicator--40ab8b89-3659-4638-a618-cab34c3b7698", "indicator--c2d7925f-0f3a-455b-8acb-93d30e346c87", "indicator--7293ddc3-2595-410c-89fc-c35c947671ee", "indicator--a02d1ab3-2320-435f-aab1-8c72d1601693", "indicator--f7028aa1-984f-4262-8bcb-79ad41943d02", "indicator--d172fcaf-37f5-4062-bdf1-45775f2b622f", "indicator--b93fabff-6a04-4dbe-8bfa-413dce05fb43", "indicator--ab4d25da-baa2-471c-8622-b15ba3d74351", "indicator--f342b631-5ff1-4e34-b367-2930976b3c20", "indicator--65854e9c-8b8a-466d-85fd-efb5821a1694", "indicator--127a90d6-877a-4b58-87c2-8a5e0e4688a7", "indicator--dee4bf29-b7c3-4b4b-bd95-6ad53c17a9ef", "indicator--264697b9-6bf2-4975-b990-1cd1da02919c", "indicator--7e6a6e71-0a80-4fdf-ad5b-d4a67eacb6ef", "indicator--4f3084f7-ed6e-41b9-972f-e860a9a64d5f", "indicator--4e88e845-da9a-46fe-a475-c3ce456836e9", "indicator--167e7ab4-e496-47a8-8774-da2dbac68614", "indicator--f4981f69-4b78-4155-b4e5-eccb18f76896", "indicator--7f6b9b55-8cb8-406f-99b3-c608aaa76a20", "indicator--8a703dbc-343c-4f7d-a077-87dfd920d998", "indicator--57e81d9d-bfc1-4c06-8465-ee77f957e623", "indicator--2958c0e7-bbd1-4d4d-bc2d-fb07dfc1acf0", "indicator--cd56b288-9e6d-4e94-977c-c41105de10af", "indicator--2f99713a-80d2-4589-b62f-988eff26111a", "indicator--72bc9edb-34f7-4fdb-9b97-4c956e94b29e", "indicator--7d2c9900-6216-4cb9-b8ad-70b278682288", "indicator--a85fcee0-679d-4a43-8afb-f6972b963852", "indicator--c574155c-57a0-4873-a3be-cac9965ec6b3", "indicator--5d945436-c9a3-4a42-b105-5b86576b52ea", "indicator--fd5151bf-16c5-478f-affd-d053654d1e40", "indicator--88f66cca-042b-48d1-ae99-9b259a757ae1", "indicator--eed9066a-7671-401b-a020-481ccd913229", "indicator--62a757de-54a1-4184-bb32-064db97a7cb3", "indicator--3099b813-d534-49db-8cbc-d7de83624c6c", "indicator--6c7463eb-7769-49a5-94ef-e80e8dbc241b", "indicator--c639f424-5daf-4a7b-9093-cb867ee94ecb", "indicator--b57ab982-72df-4b8e-ba10-c9432679896b", "indicator--cbd31a53-f13e-4309-9bf6-5e353bf23076", "indicator--08d98c10-6400-4fa7-959c-f4ec27ba2741", "indicator--e3642c6b-b4e8-4c56-a3c8-926ae4a0ce1c", "indicator--440e44eb-6dc0-451a-b56f-7b0e39ac8e5a", "indicator--dd0fd924-8e82-4beb-956d-c53c6e949c05", "indicator--966afa33-f412-4537-8182-df22514fd25a", "indicator--5db24407-d8f7-46e3-a848-ff81a59ba779", "indicator--67182e8a-5653-4fae-bc5c-3048a8269e90", "indicator--b107e427-3236-43b4-9bff-8f1df4fd26c3", "indicator--ab430147-5bd0-4244-a601-ded00508260d", "indicator--2dd958a3-40d5-44a7-9ca9-6d7b7e0ff84c", "indicator--9bb8e990-9304-4d07-98f4-c71b52f63475", "indicator--ec04e707-94e4-4124-b386-b5705f57bc34", "indicator--8c0d84fc-bbc1-4fbf-b5cd-796e162435d3", "indicator--8deefbff-0cd4-4b1e-a515-72a2998f35fb", "indicator--c2ffdc0c-1e4f-497e-b286-90b444c576bf", "indicator--e26594d2-55a5-40e1-a343-7960a2a6eee5", "indicator--31e99c22-6d89-42ab-a948-34fa0f7c2f7f", "indicator--8c5b8d64-0d0a-47ef-882c-1e9ac6dc2a11", "indicator--8844a7a9-d630-418a-a6f2-fb6cb5f38dcd", "indicator--10c0aaaf-5294-4ea4-b056-9256c2684344", "indicator--c9e2c916-7b9f-4482-aa27-4736a2ae21ea", "indicator--5dfd0be9-5078-4e03-82a3-50408ec43ac6", "indicator--f2e761bc-0f00-4d35-bb37-0524fcf896f9", "indicator--611597a4-5f55-4231-8333-7a679abf34b8", "indicator--b6fe8d73-1e1d-46fd-9310-5193738b447b", "indicator--eb06b45b-a294-471f-9a15-3306a52eede9", "indicator--be33fd6e-d02e-480c-bcdb-09634d7dfeb1", "indicator--a815d5d9-ec9d-4564-9f52-0e58d938d10f", "indicator--df67f26e-302e-4281-8ec8-603ee2c10d14", "indicator--82cc5a5a-ae52-4477-8249-1d39b3aecec2", "indicator--22b0cbb6-d566-4e3f-b3a0-0fff31b2677d", "indicator--50b7e73e-42aa-4aab-8513-24589244c755", "indicator--4b94c244-ba7c-4b2c-9006-615100b6cf83", "indicator--fa482c37-3e32-48c8-b0b8-9d2a2aa9f50c", "indicator--b8720288-08a6-49ab-a106-b33c89daf4c9", "indicator--8ebc243e-6b26-4e93-9005-7f9fa45c5a85", "indicator--1d4a1c98-e46a-4f08-af4d-507267aeca48", "indicator--6f7e2b4d-75a9-4482-93c4-f3bef355ee55", "indicator--e0f28df1-ef27-4b8f-bdd2-34df25d088cc", "indicator--e2191ef2-85d5-4012-8e9d-0f72109bc4ac", "indicator--d50ed7db-ee78-4f62-b480-2e88308c023d", "indicator--21dd4fd2-eae0-4eb6-a469-99e78879f671", "indicator--b18bbfad-54ed-4316-98b0-b27063306a31", "indicator--3041fe43-1719-4951-b808-63a4876b0896", "indicator--7df5e962-7be7-487c-adcf-3e3e15ddc279", "indicator--48b135ca-d27d-401a-b478-5fabb4912aaf", "indicator--18b0fce8-81e7-48ff-9dd2-4442550ba630", "indicator--6e8cd392-4c22-43a0-b794-a2e27be20593", "indicator--ce46edc1-406e-4fa9-a2b8-5ba6960d0058", "indicator--bc7c4055-8638-4847-91a8-b94ae13f1624", "indicator--f461c67a-adeb-47fd-b39b-d32628945ebb", "indicator--9d8449f4-148f-402e-8871-93d368222f00", "indicator--6083d923-e90e-4ccb-bb5e-59c68c89204e", "indicator--9085bded-d07c-473c-a35a-916850cd3741", "indicator--4282218e-9db0-43ad-a660-9340c2e09234", "indicator--b7139379-2522-41a9-b179-387c998a4077", "indicator--a128aca0-df1e-49da-868b-e494cb10ac39", "indicator--4828baa4-a82e-4701-b8dd-162158c6d305", "indicator--24c0235e-a3c7-4f05-a640-01fb6188252b", "indicator--1c22c0f8-5da3-4b87-a86a-1044e371ee57", "indicator--d73eeea3-bc5a-4564-be72-c0b43fca1336", "indicator--2ed0dc9c-e3d0-44a6-a2c5-7971756eea22", "indicator--50f48292-0f25-4d40-84ba-9dd30a5b0214", "indicator--384d28cd-9480-41e2-897a-f94c3d7aeafc", "indicator--623234b9-e9eb-49b9-a594-f10ad50644d3", "indicator--ca34643f-3b89-4780-a84c-97855153e45f", "indicator--78334fc7-5bbd-4503-ab94-a13ddb754c6e", "indicator--f38e3092-8c9b-4800-8f52-967070d5098f", "indicator--c1041045-0bc1-4672-a818-3e7d419ff2a8", "indicator--279c6c05-0db6-44da-b0c5-4967650f74c4", "indicator--76313881-039d-4895-aaad-5a0f73426003", "indicator--82bc61e1-6b4f-4b0c-8abf-352a744e6bb6", "indicator--5ea4912f-9421-4a13-ad34-9259db134f95", "indicator--76f33842-ba6c-40fd-8971-19d8719f93e7", "indicator--e9c4e90c-94a5-4d19-bbb9-2e01c0f7a08b", "indicator--c2b32999-891f-40d2-a35e-3bbfbbe45ed3", "indicator--9849d2d8-08f2-4982-bfa9-e7d765efee8a", "indicator--974ed188-abd1-43f8-935c-953b2cf1bbaa", "indicator--b7938ee3-96ed-4e93-bd97-af1ad9985bb1", "indicator--6b39c76b-feb4-46f8-85b7-b0d262656127", "indicator--53fdb51f-38bd-4bca-914b-eb6d6a30c795", "indicator--9455322a-c3aa-475b-a13f-ee9a8a0fe9d8", "indicator--a87c1a9c-9664-49fd-ac45-7fe4907894b2", "indicator--182f7da1-4c30-4cb1-a9a5-3e4e0e7b97a0", "indicator--b078d1f9-f202-48e8-b21a-da888911c897", "indicator--8b658ad6-6b2d-4aa7-9bd0-e809f6a6ddda", "indicator--590b7d41-9c01-48f8-b5f5-5b2d9840713d", "indicator--53fe8aaa-c831-49d7-8429-0ad7fe2e80ed", "indicator--5490ee75-855b-4673-a9c2-4c159d75dcf4", "indicator--a19697a9-b543-46bc-9a93-5c10574c855c", "indicator--ba46d0c7-e4db-402a-841a-f7ab39eb6b91", "indicator--9add8c83-d0af-433e-a669-822ad81e6a55", "indicator--20b509e2-d670-43c5-ba95-11c4b49404f1", "indicator--23c27cc7-4279-4fbd-a546-fd972ae5fb26", "indicator--aed7f96a-e344-4f4e-83d5-8df876ca0e7f", "indicator--dd31c28f-ce03-40de-a0a4-b47734c6654a", "indicator--f184296c-806e-4efd-b8f5-7a751a74e77b", "indicator--a888dcd2-7f51-42ca-adf0-676a78f96da7", "indicator--bd951384-bc11-4411-9d16-4737d70ec392", "indicator--7ac877e6-9b30-4254-b3ef-d85aa3cf1ac9", "indicator--b1eef8dd-db8a-4f03-9539-030673bc6242", "indicator--11d9bf2e-dbdb-46fa-9db7-108ff51060f4", "indicator--27a1911f-f8fb-4038-97e5-2d5bfb64b744", "indicator--ee918d43-c723-4a70-b6a6-2ec8b70ea343", "indicator--56b935b0-1306-464b-b0f5-adb1f5603d9f", "indicator--96c8b92a-38e2-4da9-824c-414db6b5bc1f", "indicator--65fb04e4-0031-466a-b989-c97d05191bd8", "indicator--b0c9c767-b56b-4638-a488-eb98865ccae6", "indicator--b8799887-ba51-4f6a-84ba-3acc0cd9e10c", "indicator--3dd9ac4d-da4f-4956-a017-f77f7d47ccfa", "indicator--1c6fdbd5-3b9c-4ede-8b75-5c4ea237d588", "indicator--f696a71a-908b-4d56-a23f-0c995bc9f78c", "indicator--b7bec530-60f8-479d-acce-83fe4c0cb6b8", "indicator--65bfd489-9727-4e60-8a18-a441ce441d56", "indicator--0588072e-7c8f-44d2-8275-01820cee3bb1", "indicator--21b5cf7e-ee1b-4489-8f46-f6d33a435cbc", "indicator--bf5863eb-f470-46c5-af07-233ddd6643e1", "indicator--69f4dfc3-4c24-4360-9ecf-3c2e1455b6e7", "indicator--aa54a32f-25f3-425f-b792-6d82a725bafb", "indicator--debdc2b3-24aa-401d-b12a-9d040a4138aa", "indicator--be63b75a-a687-4c9c-8087-7437ec1e3cf7", "indicator--8a7bcd7b-c845-4e74-b489-49a004dd8d51", "indicator--a3c570dc-445f-49f0-bd23-a30346c91e3f", "indicator--c94263cf-97bc-44c0-b593-a5ccffede676", "indicator--16327a47-b791-4729-9a8c-19ce89659f1a", "indicator--9b43cf94-13c1-48aa-b461-745119b29d6d", "indicator--501992c8-6905-4448-b6cc-18cce3619205", "indicator--e47ed646-2137-4e54-9091-0c8873dac434", "indicator--57afa965-8df1-49ea-9362-dfb77efdc474", "indicator--228465b6-c980-4d5c-b929-b8494c89d45d", "indicator--3b261624-058e-47a3-a2f3-72e7d5b88d01", "indicator--5d9914d9-9e4e-4753-a417-a3d4346b65e0", "indicator--aac343ce-c92e-485d-aa34-838f9c5f58cb", "indicator--a3741305-3271-4a19-ade0-1423db319def", "indicator--a2d72ab3-8bf0-440a-99cc-718cbbe6113b", "indicator--d58d50bc-6c85-463d-8ef6-b680fc952bcf", "indicator--925296de-f580-4f9b-bdc7-d85760b8cd07", "indicator--772650ff-23e2-47cc-95eb-206060894a9a", "indicator--bdb77010-6409-4c83-ab55-6067f037c339", "indicator--01c5bb82-a58b-447d-9576-6100bc6dc30f", "indicator--ca53c76d-c12e-4cf9-8112-deb29a33a556", "indicator--57bcb5fc-3708-4f20-b4cd-8a7bf3662c26", "indicator--5d499093-54df-4f24-a2dd-ab1f18e9c584", "indicator--ba50d14d-1aad-4418-88d4-95fd6ebd26bc", "indicator--34a8eea3-24ca-41ed-9ad9-128de5d4387f", "indicator--98bb4c29-9972-455a-97ca-feed669e0986", "indicator--e0acc818-2ba6-4cd0-9f3d-e61718467c1d", "indicator--53592ff9-abf5-4354-a98e-690043ccd7e4", "indicator--7b03c414-a77c-44c1-83d3-9a278f69d2e0", "indicator--18d4d88b-a3ab-47c0-84f5-b58b596c4773", "indicator--307ae6ff-c2c0-4c74-8a99-55bfc690df51", "indicator--108220cd-69a9-4cfc-b5b4-9b14e62ff709", "indicator--3704a76b-0702-4800-a90a-a7bd64b9d8e2", "indicator--eb5cb2c4-54c1-4acc-9530-feb173d20a69", "indicator--4c96b931-c2ab-4457-92f5-23bb5efa4ef8", "indicator--be335d1d-4efd-495c-bdb1-65b8f2b81225", "indicator--faaa1a3e-e118-4517-ba1b-26f0e6b30dac", "indicator--ab516798-104c-44ab-a4fc-b4e49b0fe5da", "indicator--404da3c1-7431-433a-a100-4d913cc0b80c", "indicator--e63628cf-a199-4dbc-95e0-e704c53284f5", "indicator--366a6a9f-77aa-46d5-a390-47c48154e257", "indicator--babd51a3-2a36-43b3-8356-f45009075c40", "indicator--8cff815a-397b-40ab-8d9b-2ee27d695e83", "indicator--30adb5e2-9c64-4825-a4f6-8c94e17e7ae8", "indicator--e1fa3116-a16a-49b8-bef0-3d8b5ae4a8a6", "indicator--8479bca4-d013-4fd8-a426-b71ee76a2b60", "indicator--e40e9a2f-9e69-4243-ab01-0607768302db", "indicator--47808511-3791-4ab2-8ae6-ea6bd99878ce", "indicator--8ab25371-c309-43eb-ad2b-2e376df247fc", "indicator--22762a83-a273-4dfc-a878-59be317e4019", "indicator--7a6b75d8-381b-42e5-a5c3-f58878d5f907", "indicator--de30688d-3ea5-4287-b661-bed94b7413ea", "indicator--3588e351-acf8-4742-85be-058e10f1f322", "indicator--76117850-4882-4d30-b168-88ce63afbb3a", "indicator--d7c921c7-e879-4549-903d-1959f8e2e97d", "indicator--3bac3f34-932d-4563-b76f-0585f3de8050", "indicator--cbed90b9-cd2f-41f4-bb3a-5a95f21e1e07", "indicator--2ea1b7db-cb86-4f46-a569-b381318e9421", "indicator--a302e91e-83ab-40d4-81e9-6de15076037a", "indicator--8268a4f9-6a95-42d2-937e-6489731465ea", "indicator--d9473963-1df8-4809-b1ab-4d509d7349f6", "indicator--340af4ef-4776-4ae5-81af-a78d13c4aa63", "indicator--aa834645-0a7f-416b-8803-ecc123e42d54", "indicator--5cfb2575-66a5-40a1-9798-55ae749bca73", "indicator--e512732d-4162-4813-bb44-a562ee63c498", "indicator--e04561f2-9e93-4e0f-9a52-311e1871a183", "indicator--0c4c4c36-8cbb-4936-86eb-8b380d306cde", "indicator--3b69aefa-837d-45a3-bfff-7c7eba7bcaad", "indicator--3bb5da41-de1c-4be1-a4a2-6a32b80d21a5", "indicator--ee5e3217-c065-4084-91f3-40d89ca4f4a0", "indicator--abfbbaab-47bd-4b90-ae7d-1bb8fc64cf81", "indicator--24456d55-d09b-4aa8-84bd-5afa6e7f95fe", "indicator--ea2235e4-095b-4c88-8680-ec5fb970dd0d", "indicator--c2a861da-ccaf-4715-a39b-ebd2fd90fc55", "indicator--b4ca64fe-da17-4594-b132-9d54386c4c12", "indicator--9c689c26-8e5f-465b-b79b-7bf1f0045f1d", "indicator--5e5f8254-8a83-4ac8-ae94-45091092bd19", "indicator--fbb68d37-5343-449b-a615-64dadaa48e9a", "indicator--f2124b32-1995-437b-a30e-36cfd056de88", "indicator--db45310e-88c0-45b8-8a1e-81cb1a5cf742", "indicator--0e420d27-64eb-4f82-980f-507ae4d0e770", "indicator--d9690fbf-ec5a-4a96-9337-8bd0a0b0e733", "indicator--cbd3313c-d4ee-451c-b33f-0fdb6edf5d65", "indicator--527950fe-c5a1-4f12-a497-c3c25b385de3", "indicator--6bfe97ea-30e2-4b00-b638-7a326c3fbdf6", "indicator--0de9cbd1-0d8a-498a-86d9-f02ad9a2bdb9", "indicator--381470d3-f899-47ef-86b6-bac015600f89", "indicator--5221b841-72bc-48d3-9dfb-2d0f9744e2eb", "indicator--464a3bfd-f7cc-41d5-b075-e38d0c6d2366", "indicator--4e2de2ae-fdca-4e91-8964-52fcaf415eab", "indicator--a80a53a3-bcf8-4cd0-b68f-c2158a0d3ec8", "indicator--8300b339-34a8-4558-889a-9abd7ca230b0", "indicator--560203bf-3939-4393-b147-e1f91dd499e7", "indicator--b1dbf08c-3c95-45c3-bcd5-441d90d4f8aa", "indicator--17e19cdb-151b-48ca-901e-67fe702a1a49", "indicator--b422eb2f-5efa-4481-8614-b536e6e2b6ab", "indicator--c2c301a2-5d1b-4e99-ab76-e37d7f63585b", "indicator--5343e88a-0122-4af0-9acd-b65979b67493", "indicator--e9755fd2-83a9-4195-9e3a-5bca724a379c", "indicator--a6528edf-ddd1-4950-824e-67fda5fe61f9", "indicator--2dec37a7-6aeb-4fcb-b940-3e394a99f5a7", "indicator--82870d4c-1d5b-43ab-9861-5f5ca6a61ddf", "indicator--82350fb2-a579-4720-87db-06fcb57ce2ea", "indicator--25a4f50c-ef15-422e-b049-df17d4e394e4", "indicator--8fa30b7d-d5c1-4532-813c-1dc9c59c3c69", "indicator--9f52f636-bd15-4da2-98a4-44fbe686e950", "indicator--247ad377-a78d-45eb-8b3e-a4498d057284", "indicator--63860126-a57b-4c3f-822e-b27f554a33a2", "indicator--3bb8fbca-0023-4b7a-a4d8-978835421568", "indicator--a13461d7-1c80-4d24-84ca-c89e42079fde", "indicator--3afdcc46-b75a-4502-b63e-c9b1e0be5fd6", "indicator--e5d3d787-65a1-4c0e-8e5f-c47dacec6417", "indicator--2b37e493-bee6-4b4c-b0a1-0e4166c5e12b", "indicator--cc5e3e1d-1726-4fff-a548-5854d614605e", "indicator--f24764d4-75c8-4d64-9e5a-89486a4567b6", "indicator--4e4e7a6d-1234-4f8c-89df-846dfae90af2", "indicator--11f48e92-3224-4b6f-ada7-6af5676f72cd", "indicator--ed5834bd-06e3-4095-802d-819590855d3b", "indicator--7e4a857e-4b28-47ef-9097-96a9fc07f771", "indicator--c51271e0-7ff7-458d-b51d-e45396dfdcef", "indicator--334d6599-5b7a-4d54-af5e-73ec5348f5f5", "indicator--98d76389-a684-4a25-ab7a-e8dc8cf76e1c", "indicator--cf4f8a9b-02b7-4b11-89e5-77e28fe3b943", "indicator--6e9b0240-940d-4743-8998-5eefca03d85d", "indicator--384cfbb8-2cd6-4cce-b123-ef1fb5ff5e0d", "indicator--4e5d47b3-9ad3-4a7c-a2a5-8fbe98546797", "indicator--1b63dc25-a2db-44cf-8bff-932f80ecdebc", "indicator--b4a534e8-201e-4a8e-b050-af27703e6124", "indicator--bf5bace2-f486-4c0b-b5f4-54301848c836", "indicator--f9c83bd8-e985-40bb-b127-0cee2e30a663", "indicator--225df8df-8775-4d6e-8ba4-0eb546c87d27", "indicator--3778a32c-951d-4ed1-b100-e8c169a36253", "indicator--78b05a20-f639-4693-82eb-50179382bae6", "indicator--83e81fef-3806-49de-8647-01fa09dc874c", "indicator--941f03cf-5624-434f-860b-e384620dfe97", "indicator--ca7d182a-a7dd-4598-ab1e-5575518c64fa", "indicator--33fe084c-d9f7-4f82-8f7d-893f12a207fb", "indicator--b31f7407-9b4c-46b8-8abc-4b3637774f49", "indicator--027604d6-5a65-427a-ac6e-9f5b704b1192", "indicator--889cfcde-b7d8-4aea-b778-3c3fa382d7ea", "indicator--e1f75e8f-bcf1-45a1-94a4-35092d43567e", "indicator--09c19379-f9b2-4e93-9c11-f7f560682c87", "indicator--dd1a0e9f-d671-44cc-95ad-e81dc0c82212", "indicator--d763fc3c-cd63-4a35-8cc0-e7b71b207515", "indicator--3b106600-bfb3-4c3c-aed4-34cfc2d6d839", "indicator--56cb6720-408e-4b2f-b5cf-53838017cbfb", "indicator--ad7bc98d-0b82-4bf6-b6b3-cbc6550887d0", "indicator--a3f992c4-eeb5-41a7-a4c7-cf58070e1d10", "indicator--bebb4147-83e4-47a0-9bfb-2a2aa5f61abe", "indicator--f843b094-68b2-422c-9d4b-ad3584b514ac", "relationship--c79ffc42-3d26-4dec-97ba-d072676d1364", "relationship--68116b90-0acb-445b-a58e-d272a020f90b", "relationship--7a5f12b0-dc62-4aec-8c05-7f8eb40f1169", "relationship--cfe1c949-e496-4c07-8c7f-f5b6bedb3726", "indicator--b5374460-8c51-4f5b-a046-d9dbec52b8f1", "indicator--4aa305d7-96fb-4ba0-8aef-16caab09d962", "indicator--93b191d8-9213-469e-8f4f-34b7015c296a", "indicator--82130a81-4604-49b8-a049-9555e9ad0d90", "indicator--df24807f-7657-4b17-a06f-812a3976fdfa", "indicator--7ef4a6f6-c7ee-496f-bf74-15f20cab5410", "indicator--d9205ffd-f0c5-47ac-a2fa-6ab896fd5c50", "indicator--e78a8bf0-002f-4810-a6ef-7f02b804d74b", "indicator--6fdaffaf-927e-482f-836a-30ad7edefeef", "indicator--e8422afc-14a8-493f-8b20-fe3f7cea8f0e", "indicator--9e18f866-65b0-4b17-8f89-ce3149286175", "indicator--fe277670-a087-4f76-a19a-2e52fbe28c8b", "indicator--5edb0e0e-a1b2-4c9a-9a30-690f6ddd65ac", "indicator--42ce88f5-3939-4ba6-84fa-88bbe4bafc19", "indicator--084df862-a2b3-45ca-8d71-49fbd34e91ba", "indicator--9dc411ba-25bc-412f-b22f-85deaac3a022", "indicator--bf89e75c-4220-44f3-aa91-ac78720c8936", "indicator--ff3e4f9f-dae9-4489-9686-76adda508905", "indicator--08d4cf0d-cd56-47f5-9e9b-4e336d64d917", "indicator--bc785970-8a8f-4d1e-84a7-96f0b707deef", "indicator--e4d63163-419d-43ac-b5cd-799639cb7402", "indicator--5509bd68-7d00-47fe-97ac-0605df2494da", "indicator--3e33b78c-5bd8-41bf-865e-da31cefab598", "indicator--e0f84f40-1aad-4551-8f34-ba0a381d43b8", "indicator--0de73409-56e9-406f-b19a-5f424df51b5b", "indicator--1f8ff4db-b701-4cc8-8236-f6e166930196", "indicator--161e6680-8682-4020-a340-e97941cb40b9", "indicator--902aeb96-ce52-4d9d-be30-7498925e304b", "indicator--fd566f95-13c5-43fb-9c5e-c2a081dab620", "indicator--805e7436-7eea-4bc1-b85b-9a1b52c46323", "indicator--b8b6ecb1-690d-421e-b101-c5f3b9142cb8", "indicator--30c48d4b-7e62-4ead-a2a5-9e011425c4eb", "indicator--b7d6a5ae-9501-4b78-be3a-ea3a8586dc00", "indicator--401ac347-7bf4-49e6-b230-01324ab2c2ef", "indicator--8ecbee61-ff97-4c9a-8a7a-e8c20bb7ba79", "indicator--e31d40e3-120f-45b8-994b-7cfa2f076ea5", "indicator--5e16e6da-539b-4332-8af7-eacda9eca4a1", "indicator--bbbf6376-95fd-4de6-a725-c6e690e6eb32", "indicator--c2247fb4-ce0c-4e66-b56c-46d35eda3be9", "indicator--3eab8e24-9a33-48bb-b9d6-aefcfdd19b0c", "indicator--67688662-8649-4b5d-ba3e-a49638f6e356", "indicator--9f7aed8e-b531-4656-8dac-59403e87dee4", "indicator--f12728b0-c6f8-454b-9ece-0a84539e3ecf", "indicator--003fc00d-a32b-4168-9dc7-aca47e52d030", "indicator--da2df8d4-d58a-4628-bb64-73036f6bb945", "indicator--c394433c-59d2-4311-8fd4-082d885e2d4f", "indicator--d4b19127-ea96-4626-9097-fb0a9968c9db", "indicator--d59c7e1a-7153-4492-9944-9b0880abe271", "indicator--1bd71882-8466-433b-841f-a82edc3c30e5", "indicator--af4ceb81-5d70-44bd-a86f-d5a720214092", "indicator--e4c59b14-0307-4c1a-9fae-267f8ef0e964", "indicator--b31bbc73-5b25-43cd-aba9-c91e5d0c8076", "indicator--20aebd35-cecb-4cb0-8b6b-ad06f742e966", "indicator--1cb0adc2-e56a-449c-bf6a-e2d624345c40", "indicator--f0fcf90a-6fae-4d20-a91e-335001907500", "indicator--e1d1a5fe-d771-4f90-81f3-b3d62e9499b9", "indicator--6429224b-2579-47bc-813b-7a4a35f046b6", "indicator--ec8247ab-a8c6-48cb-8941-de96fe071fdb", "indicator--bb670036-c8ad-4be6-a10b-ab610bff9b4d", "indicator--223a586a-aa37-43c7-b607-ea498a903221", "indicator--53163b1d-0391-4082-9db5-83e385e2eaa2", "indicator--1de7f839-835f-4aa5-a065-10a180743d50", "indicator--1f408437-5e18-4ffb-a855-25e0128800ee", "indicator--d7705dca-a792-4d92-9900-a57043d9fe4c", "indicator--2207b6cc-51d6-4546-be4c-e1ab0d2c612c", "indicator--e5346a29-4674-45ac-bbd9-156bcc7f63b8", "indicator--cb446984-2ef6-4b05-97f5-52b059d325d7", "indicator--b8e220be-aaef-4b16-a2ce-2280d51fc3aa", "indicator--c12a09e3-9599-443a-ab20-e08be6661009", "indicator--d8706244-de0e-41ac-b40e-6f23ef24ae91", "indicator--fc886f0b-8611-4ad7-b073-5f46e260f14f", "indicator--7423d919-29fe-4875-bea9-39a34fdd6907", "indicator--ee33c9b7-17dc-4929-af17-7d53c8c0c13b", "indicator--b66035e9-730d-40e7-83f8-322d6af21ac1", "indicator--e75fd185-3042-4133-80d9-c690bdb46a56", "indicator--9c5d5729-f2c2-4898-a384-b7e1e2b5c338", "indicator--70f888af-0bac-4493-ac69-36ee739c0d5b", "indicator--6e57eea1-b99d-4d01-887a-26ed38f9746c", "indicator--6c3a987e-32d5-4ebb-ac51-40f98a558c7a", "indicator--a666a0a2-77bd-49d4-92fa-0597eab10bb0", "indicator--373db4ca-3d2d-4b74-b909-716bcb6469a8", "indicator--530db25a-9d73-460b-9320-e1efaaf26cea", "indicator--f4954123-9068-42b8-b094-3f9bebbe5109", "indicator--55c47560-3a50-4590-b4cf-84a467dce8ac", "indicator--280069de-7926-4155-b5af-758957eb59a2", "indicator--f84fe19e-da88-49d0-a3c7-212522d00a2e", "indicator--40c881f6-ff46-4c29-b145-ef53f28d3257", "indicator--b6ec0509-b31d-44fc-b562-e0956149742a", "indicator--7b93e74c-f900-4e49-839e-2fb63d593218", "indicator--15a609e3-9933-4446-b175-9f76283815c6", "indicator--6c7b2cc4-9283-4a32-b684-bc33635853ea", "indicator--301d6a1b-862f-4be1-831b-75f3d7e74382", "indicator--f32fd31b-93c4-4e58-8c0d-762e39a4a688", "indicator--2b7732d4-a000-49db-be45-ec7642fa144d", "indicator--b441e6a5-ca74-4c6d-9b30-b65cd381b653", "indicator--1b9ce760-41c3-4819-9a00-2790669c4618", "indicator--3c06f4fd-2433-407a-99fd-5cf45da087f0", "indicator--bfb2c05c-64da-4fe3-9f4e-50d3b03a44e9", "indicator--0344e387-5d8e-43b4-af27-b8520abbddd8", "indicator--5b9ad309-56de-4f03-aba8-bdbfa16483bb", "indicator--c12a0560-baaf-47b1-82f5-e26dc5b46d01", "indicator--0226ecc4-014a-4635-a89e-a01d76506895", "indicator--d7ccabce-107d-4848-bc5f-6dce353c9b3a", "indicator--2b221b12-c928-4c22-8828-539f05af6b95", "indicator--a19b1288-53db-4c46-93a3-78cd8fcc20d0", "indicator--7446860f-f183-428f-b46c-59c30ad9c534", "indicator--be895787-6a94-4165-963e-9e5ba49a8475", "indicator--6f6fd5b1-8d71-448b-9a58-ac3f75683655", "indicator--b4b47f64-6487-4127-91fb-71f4edaa6c26", "indicator--b2d1dee2-3ace-4b1f-af8d-622c8b223777", "indicator--51c915e7-0e93-49c0-b88e-a60495a5dc8e", "indicator--f9b2d84d-0a0b-4971-9ea4-fb65cbbc06ef", "indicator--45348aa6-ca4c-40b2-8b02-aa10dc41e1c2", "indicator--2ac861b3-0d6f-4531-9fa6-b89eeb6c8b38", "indicator--78255289-33b6-4548-9c18-e80ad68edef6", "indicator--24f38d9e-2055-4eb4-a251-d728592681fb", "indicator--32069bde-fb82-4502-9543-324b9e751516", "indicator--03d72d32-a030-4c63-a638-f9435006892b", "indicator--eab0d2bb-c04f-4962-94a5-51cf21ae94a3", "indicator--613b483e-60d1-4ede-b204-e69bc40f3ff1", "indicator--b95d5d9a-4ce7-42c0-9ed1-dbaa283543e5", "indicator--e1a5cac1-3cb2-4751-b3ff-f2daa184842e", "indicator--55c81271-50ae-430e-b7c2-cbe56fd8c2b6", "indicator--faccaa63-52c1-46bc-8e62-f1236c48cf24", "indicator--04f80840-d0e3-4415-938b-9ffc685a1614", "indicator--3f2705c3-0aa3-4fec-9e26-8cd99d12ae0f", "indicator--5cd21ad9-3f6f-4194-a9ca-181c2f6dca5b", "indicator--9b307210-9672-47ca-b828-7b6ac9df5e8e", "indicator--dd74d5fd-dd9e-4358-89f2-62e785197b79", "indicator--1457ae64-6df1-4e87-9cd4-a66d277088f8", "indicator--3d52e8b8-c2f5-413e-a9e0-94688507ae53", "indicator--77f61b81-6ff6-431c-b1c9-303344ca5ab0", "indicator--48f475dc-3594-4dfd-9349-03399275369a", "indicator--55bf2701-0e2e-48b6-a10f-82f484cc3bcf", "indicator--97bd2cdb-d5d9-47e2-945f-23bfa6a65ad6", "indicator--53d0975a-3c74-4626-8a1b-ad625491cc60", "indicator--04e75d97-c1b5-41ab-875e-8a434c9dcbff", "indicator--c70eb764-c1d1-41fb-9d17-655b485ae2af", "indicator--1bf2094e-ef7b-46db-a5f9-e5d0e3e10435", "indicator--b8f9b44f-8897-4770-9396-140b9017833f", "indicator--1b01059d-ae36-431d-8a5c-4bed63d81539", "indicator--de002fbc-ce08-4d62-bd4f-a0e6f2491869", "indicator--5a900234-0ec0-4de8-a0ba-cdc8bf972aa0", "indicator--8bab3f56-33be-416c-8285-b024f0d0d03c", "indicator--f694c830-e2bd-4aef-acd2-fc1b984840cf", "indicator--06e47076-a637-4f79-b18e-e068d0eb944a", "indicator--7d792c3c-7602-40da-b9f4-2c0fefa1a9ae", "indicator--27268cf6-8105-4e0f-bc9e-538678ca8af9", "indicator--f570db26-6827-47a1-ba2f-4ba3bc1ec1c6", "indicator--aa826ef3-743b-4d6b-968b-012341d46da6", "indicator--61ef6f4c-09a0-4100-a08e-d1d8a8105200", "indicator--5601ef1c-b79d-4ceb-9018-17edd68a323f", "indicator--424cc21b-7b7c-4da1-a5d7-ad19197b6112", "indicator--2d9809e7-3552-46d3-aee0-f3484631a94a", "indicator--52d4630b-a50a-4a62-8e5e-c4e66058bffe", "indicator--8cfd8188-1f3b-4b81-b7f1-c09a66eac3ab", "indicator--34043fb1-a847-4b77-b517-15ffe9d4b1d5", "indicator--e08a5af6-082d-423b-8e5b-86a9e340dc0b", "indicator--0f5e3d05-c71f-46a9-962f-3f3a8dcd6f57", "indicator--7140b37e-3a97-4e85-ba3d-ff25806a24bd", "indicator--2d42abb1-7022-4f54-a015-c29998ca2321", "indicator--143f7666-4fa9-4078-bb38-e52bd6ed2af8", "indicator--ef5777f9-871f-4a39-ba69-b1baffb87470", "indicator--d4981f16-6ab7-4fd8-a0f9-9dd48d75abe9", "indicator--c769e1f0-213c-4e78-8e6f-779fbe4a96fa", "indicator--daef4126-66aa-466c-b4d8-401377ef5bdf", "indicator--465325d6-c86e-4ffe-a0b6-859c2105b391", "indicator--281dbbdc-b7e4-43dd-a295-ae0cf585cd1c", "indicator--da1ecf9c-c6f5-4856-b12c-29fb3af89892", "indicator--87121f01-a46c-43dd-9dc1-c9237efbe75b", "indicator--8cfdf915-7a38-4d26-8245-548b3126f28b", "indicator--7d3c6cb3-b8bf-4d1b-8ebd-62bce6465ca9", "indicator--7c2a247a-0933-4cad-9cc8-50caf66f9772", "indicator--6b6915f0-a826-4775-b539-4acafe30d462", "indicator--60dbb044-f9af-4954-8636-833a69a0d4f3", "indicator--933aadcc-1bd7-423b-9b63-cc19393372a3", "indicator--91cbd22b-5ee6-4ec0-8869-386178b3b996", "indicator--4cd47409-86c4-483c-8422-1c376651b21f", "indicator--adf9d5d8-1db1-469d-85d3-359661d9cdda", "indicator--a543e035-b733-4986-b0f4-cfada2f89d3f", "indicator--855277c1-dc73-48f6-b653-1c99dafc5e91", "indicator--6ce72337-a536-4626-860c-e3d0747dd2b6", "indicator--53b13631-9818-4edb-88a0-d75d7aa2dfec", "indicator--706c679e-903b-4651-877d-c572e0caadc8", "indicator--94264675-e64a-43d8-9ac6-a694f0daeed3", "indicator--61528ed5-7b72-4a0e-b73e-960710546074", "indicator--7801c8c3-c6b8-4ada-bc4f-f1a0957b001a", "indicator--79ada37b-c518-4ff1-9875-b749aec814bd", "indicator--c786e50e-be73-40ad-9b24-0bef677c0221", "indicator--8c5e482f-aa2b-452a-ba80-cb2b33591aba", "indicator--4911ea99-a049-4359-9db2-bf95e10d9584", "indicator--23fe8131-5b32-4b27-9abd-0fde0a7cac5f", "indicator--215b9210-f944-418a-ad5e-3df20f06d98f", "indicator--aea439df-b80b-4839-a574-d12a38ad07f4", "indicator--c5065d6e-8644-4714-bece-699b26eb2365", "indicator--dbe99c29-f240-4970-a605-84b02a421244", "indicator--ab3dd661-e41b-4ed8-91dc-9b11c198d5b4", "indicator--e94d54b4-3ea7-4623-8b43-a69f114447f1", "indicator--12382c23-5989-4cca-a396-b5b51ef1dae1", "indicator--17eba5df-330d-4c19-84a6-afbb80f6834b", "indicator--0a6bcdb2-e11d-46cb-b440-65ca1b893f85", "indicator--d122849a-da12-45d4-bacd-f6c344a74eab", "indicator--1ac10ce8-8ed4-426b-894b-c38be604f784", "indicator--007a1a1e-46c3-4cce-a69e-3e56accedf8c", "indicator--6bf6f3b6-71d2-40d5-9a1a-925cd156dc29", "indicator--71d73a9a-1b22-47bc-803e-4cbf269c52b2", "indicator--b0b9b0dd-9e7a-4b44-818f-e49eeaaba87b", "indicator--1c624055-c688-4ae2-bc64-f6409c7a3b10", "indicator--896c0cd4-dcd8-493b-aa7f-02fc72fdf198", "indicator--9448767e-2137-4b17-b840-b8f4a9833c26", "indicator--670a1ef4-30ca-46c0-a1a9-6583b36a048f", "indicator--fcf789cf-abc6-4288-8d60-f6f45ce49dfc", "indicator--95f44ca5-24fb-4794-86f4-5e0afb5f655b", "indicator--6e8d6e63-57cf-4591-8eda-d0259619eca8", "indicator--ed098b3e-02fd-4a9f-8b71-44f1e2f0f442", "indicator--f4f3a089-e7a9-4650-8ae9-10264fb66700", "indicator--a2be5ee5-12f5-4f96-a371-cb0ec9f60535", "indicator--dfe00cea-fd09-479d-8e3f-2da59c61dbbf", "indicator--03c92937-225a-4b1b-984a-eb64fbdf268a", "indicator--791b3792-8a45-4139-9e43-fc942260fc68", "indicator--9c44ee1e-4452-4d4e-81ad-cda047cf4bec", "indicator--085849c7-8712-4d23-b6c7-a586d43bcb6c", "indicator--ed9def40-8e8f-4858-87f3-b027badac546", "indicator--48956686-9557-4aee-a84e-2d57959caaf4", "indicator--6a666f0f-529b-46d0-ba4f-ff1058f720f5", "indicator--91dac82d-c7bb-4fa1-bcd5-a718b7bb65f3", "indicator--9e9c011d-e36c-4fc1-9e3e-9845b95e3e5a", "indicator--77878472-3d15-426a-86d9-8e9870f30803", "indicator--cc451e25-c4ed-4390-ab76-0313ecbac397", "indicator--ec053630-63c7-45ab-bef0-b4893f29b6ef", "indicator--8ddfe284-3446-445c-bd7c-ffa4f2f4ac87", "indicator--4bc4d221-dd8d-4633-8604-d329670ee2fb", "indicator--20c892a9-b06d-4934-8ba2-21788165247a", "indicator--b38b1a74-82e0-41f1-9c0e-baa82de0b160", "indicator--85f6f848-a22e-4eaa-8788-bcb8c8f8af58", "indicator--4cbbb37b-39eb-49c1-9aea-38fa1f6663ab", "indicator--330ba3cf-bb86-4060-86e4-7a0b653b3b06", "indicator--3465f8f2-fb82-46e1-86ba-d83f113f087d", "indicator--9a604a32-d83b-4977-bff3-c016fd352d5c", "indicator--a5d1b4fc-0bac-4092-9373-7df3d7c9e0b2", "indicator--59c41659-5003-4dc4-ae6d-4b1ad8667610", "indicator--468dfa83-76b6-4376-8565-8548fa66f855", "indicator--209bbdec-a0c6-4025-bde2-68d0784da7ee", "indicator--3559408c-8e82-498b-8d05-29f708d98b58", "indicator--07e41102-fec9-45cf-a537-566d05cc2110", "indicator--d6113ad2-ec94-4040-af0d-74228a5dc3f9", "indicator--0adc7797-8ee2-40df-9d2a-18564336ad67", "indicator--42667b25-2781-486b-b9f3-2a47c9f2535b", "indicator--325d814a-4c93-4c12-adaa-40fe207f2e37", "indicator--83986f22-b166-4a4e-8747-a9f214c2f319", "indicator--452b1bbe-13de-4f16-aba3-c3b5221133b9", "indicator--e553a02a-90f1-43a3-a612-7e631bbd215c", "indicator--6c087b29-3179-49b5-96e3-b4544a62af0d", "indicator--890b27c1-4831-41a2-88b9-9da074e2f669", "indicator--2fb13a23-3ffe-4fe1-87d9-3db16f1e25db", "indicator--ad212aa0-f227-4cce-8a5c-55059acab60c", "indicator--83e6a413-6ddd-4474-9a00-27d31db3c243", "indicator--223ba42d-7806-4102-ac3c-e5703f023645", "indicator--5534ca3b-7bb7-42dc-a1fc-41fb67c31ae4", "indicator--059f439a-dee3-409a-9530-aafb363ee672", "indicator--6cd71562-e816-464c-96df-9ebd8d50145a", "indicator--fa434dbb-2b51-4565-8d76-4d77a79a67a9", "indicator--e0f810ea-67fe-49b6-8dd1-c54c2f2b14f9", "indicator--4d472c85-9924-4a6f-ab4f-574a3e503d09", "indicator--75e45c3b-5839-4700-8724-dd0556cae64d", "indicator--8875af1c-2110-455b-a2c3-2ab7593c533a", "indicator--50cb109d-df94-4366-ba74-9e59043a1a4c", "indicator--c69e5e17-4d7c-489d-aab5-a05857553753", "indicator--7d786873-a3ef-4d14-b662-24aa226ba989", "indicator--86657e7a-3742-4601-b26a-53c85599df2f", "indicator--97ec1280-f632-4dc8-9ba0-2f355e63ae6b", "indicator--ffe46f0a-a9ae-42b0-a74e-efaf94553710", "indicator--f4333409-c13d-44e6-8e10-0147dc7726ec", "indicator--0c3aa3a3-49de-4f21-ac25-a8999fb05dd4", "indicator--7373b090-3be2-47d6-b513-a6b0ed14161a", "indicator--e8cdb17b-024c-4196-ae4d-37aa71b8b14b", "indicator--9911bdbb-6bff-4ac5-b28e-f13315af575a", "indicator--f8038e69-97d7-485d-b8d2-4af58119bdc3", "indicator--1b275034-86a4-4628-af22-257a587e6202", "indicator--df2e7c4f-e5f9-4833-94e5-1d48fbd71338", "indicator--06b55da9-f844-4a1a-a54d-427fb1537414", "indicator--c113f5f0-a7a5-4dbf-a5ca-fa8d12a654f1", "indicator--7e37bf60-3d9b-4f44-ac7b-4d8e69c250d6", "indicator--95474412-cae8-4929-86b9-e218fcee06da", "indicator--7e23c8e1-2bed-4d60-8534-37725508b00a", "indicator--6a3c9448-a84d-4d55-8025-8dceb1d7c934", "indicator--d23491f1-89ae-4ea7-a547-bf4860f3852d", "indicator--d62aa172-1c39-4b48-ace8-67ad024a87a2", "indicator--1df65c9d-8eb8-4bb6-a390-693e9825a57d", "indicator--755c6cd8-781c-42ac-bfca-d7c4cab24dfa", "indicator--f22688c0-4e96-4087-9b1e-90640f4f2eee", "indicator--6d1ce274-b91c-4440-a72c-8d18a00242e7", "indicator--e1ea5e90-e53a-463d-835e-4130a728b07d", "indicator--a6a61924-18f6-424f-86ed-89fcc22208e3", "indicator--e360e25b-b4b6-4fdf-9d24-3af9028fdc60", "indicator--fc7b95da-264d-4fda-9735-d7e5cc881a79", "indicator--020f901c-ea99-43ab-b21c-869a8b7ab318", "indicator--9bd227d0-c0b7-45ba-8c17-0a80156d8955", "indicator--13d6bc05-78b1-445d-99e9-d90910129bb7", "indicator--40a597d8-a4e5-4670-8005-e16ffc1a38d5", "indicator--013ce218-a2fc-48a3-81b0-3aa957664276", "indicator--ddec0257-0ccc-4b8d-90c5-e82ec8128e04", "indicator--52f9a614-c92d-41bf-87f1-51180e0cd142", "indicator--cba9f338-0f89-4434-8297-f9e14b9b6a2d", "indicator--fca421af-1abe-4dca-9a3b-12d87d1b52de", "indicator--f0727915-f1fd-467b-8198-d8867eb1043d", "indicator--4fc6e379-368b-4156-ac8f-dd5834a045c1", "indicator--60a4dc6f-2b90-471b-8c41-cf62a0c9b971", "indicator--1e01cb28-e394-4e71-8752-b00941ceb1e0", "indicator--abcbe63a-0ad9-4bbf-93ed-25cd8e918ef1", "indicator--6daee0db-eaf2-4320-bd3f-bf6824912caf", "indicator--2186e981-09ce-426c-a9f8-87ac76b720d6", "indicator--ddb0f45a-d7ac-4a9c-85bb-414ed98c6b4d", "indicator--bbfd7d46-63ea-4e28-ab55-a9030aa8b2b9", "indicator--ccb04909-aee0-4e7f-9ae7-c7739c48e536", "indicator--952a4dcb-0aee-4324-9ef0-569034f07add", "indicator--25be0e54-d57e-46fd-92d6-fb345baa365a", "indicator--e6e95a7f-f44f-49fe-9a66-f033c1cd1f00", "indicator--bbb6d454-e97b-4c98-ac2d-d093f8216cac", "indicator--6b7be585-9bbd-4d70-b0d3-7b55434fdc62", "indicator--ef49a60d-3272-472f-abb3-2b9f425eeca1", "indicator--e7fb9a8e-d529-4bd9-a023-763f3f45ab8d", "indicator--08728a50-118d-4e84-abc0-8f6da08e414a", "indicator--2ed2eecb-d18a-4623-98ee-a78e6fa3731b", "indicator--9ce406e6-99fa-4407-9427-57c928aae043", "indicator--443a18a9-fde1-414b-b5c4-6f4819b818b9", "indicator--d970a6da-98aa-4752-87f6-08ad6e279eae", "indicator--6d4d323a-384c-4489-ba8c-68246f64238a", "indicator--2c54cbbc-7c59-4830-b037-b9611fbb230e", "indicator--0e465510-6a3a-4428-9aa4-eeae5c35d46e", "indicator--d4e9d826-2c09-4935-b348-55c92230714d", "indicator--ac77fa2d-7f3f-4826-9da6-018de1e2b32b", "indicator--38350695-9683-4e93-b780-447022311b81", "indicator--aaa0f974-2c11-43c7-a374-d7adb81abcb7", "indicator--9c9968c3-1d43-4572-808f-b76c3c2f255b", "indicator--ac8a772e-f586-4079-93f5-0fb75bfa3718", "indicator--b53051e3-eadf-495c-ac1e-ae4e89971285", "indicator--49960309-53db-4fe6-9657-863fad49031f", "indicator--31efaed7-ff27-4689-9a1a-f5d55f0e92f9", "indicator--fffa5a48-19e6-4b10-9a1a-df88c6bc51cc", "indicator--2014dd2c-7698-476d-ade9-4ad19f82b5bd", "indicator--40fe5505-346c-4751-9007-5a4e7e42b091", "indicator--30b713d3-2bc5-4e75-84ba-9bbbbd97c9b4", "indicator--25624d71-c0a0-4e2e-a422-d8f22c80d634", "indicator--6c0dfc7e-4a0a-41ec-855a-60a62b5c3bf4", "indicator--8180fac1-8b1b-4fab-9122-0e29b3ea94f3", "indicator--8c57cde5-fb70-4340-9755-55df62f2709a", "indicator--d2794500-c2ec-4254-a026-e33c23242d4c", "indicator--398d3a1b-dbe7-41d6-9e7e-cf4e7a622ac9", "indicator--e5bc1c03-8d2f-4b25-9971-c9ba0d3222a8", "indicator--bc7598c1-9cc6-4c2d-b067-85fb268ecfb2", "indicator--f8138f19-4d30-414b-af17-bd5ee32d3301", "indicator--19f86103-8cf7-4a7a-95c8-928a517c7aaf", "indicator--8e29174e-bbcb-4a0d-a6ef-08a2244ba45f", "indicator--961ae51b-d612-440a-a441-2305739a89e9", "indicator--a292ce64-d565-4749-87c9-fb710c9735c8", "indicator--f4c05739-e314-4bb1-ac90-a8577ad38dee", "indicator--894d947a-15b7-4fe2-90a5-5f89d400f99f", "indicator--55e6a681-8e0b-4200-892d-21b7952bc7ad", "indicator--ef0a27af-a31b-4bf0-b4ad-c106db8df876", "indicator--ff9c2f19-b91c-44ea-9767-5556c4577391", "indicator--75c8e65a-5ece-4375-b630-25b4e99e49b6", "indicator--6e87f528-9ef1-49e4-be81-2720ebf3b777", "indicator--7f891f37-89a0-4796-880f-f4255872817e", "indicator--9bc24444-20c9-4ada-9c08-d3b2fd93c431", "indicator--45586c2d-d42f-40ce-9c26-1b86a78cc3aa", "indicator--b49776df-fa94-4f51-921c-3cd5eaadc20a", "indicator--4cc9730f-7435-4e70-8dfc-709b457215e5", "indicator--4aa46a43-f1d3-42f4-bc9e-ab5838eff353", "indicator--63232eed-3cc9-4f32-84b3-4ed98cb8766c", "indicator--b8bc55f6-0ff7-4606-9a38-258cebd8e141", "indicator--397dae78-4bf0-4682-b1ad-9f300d13a971", "indicator--16806227-3e23-45c8-92d8-3eedc3fc7a2b", "indicator--9a09a4a3-490d-4688-9d28-7168e676c862", "indicator--28717260-2e5a-4786-b9de-6f68024e670f", "indicator--4256befe-8b3d-4534-ada9-4c259570c1d8", "indicator--9b492403-f366-44c5-ae22-fce306ae3d54", "indicator--0e4f43e4-7887-499b-a680-7aad16fe4258", "indicator--76782a39-d94a-405d-92d2-2c223a6992e1", "indicator--c7eb060a-ea94-4830-9830-172d1ecffb1f", "indicator--a1c51dce-5898-4378-8966-7fc26250a7ef", "indicator--05d591d1-108f-49eb-944d-a25f177e595c", "indicator--7cc8b5fb-4590-49e2-8aea-a51c9474107b", "indicator--5e4de013-10e1-4216-bd6b-1c9d2c761652", "indicator--6d619369-7780-46f8-9959-a1d5ee20ef88", "indicator--db4c92f2-8940-4b5d-b49f-c1204fa6a6e6", "indicator--7425914e-da17-463b-adf4-476b19b86b43", "indicator--2e7666ff-532a-44fc-bf96-16f1a2699a75", "indicator--db5f6cb6-e17c-4a03-8b8e-4f001d4df2e2", "indicator--9cd88e16-0a60-40b7-90fe-5b846af1f78e", "indicator--49296161-eeae-40b0-a46c-de37f3d03f93", "indicator--33bc9ae6-26a1-4335-aa25-bf04b7e2dbc2", "indicator--0ca2f2cc-ee61-44db-8669-388aea1714a2", "indicator--3b95b5fa-1b2a-4803-be62-26901431379f", "indicator--986a1989-502f-4b08-9335-f2ea38eb0678", "indicator--8873ad5e-c794-407b-a5f9-dad9902a7c47", "indicator--e31a290b-34e1-4d49-9741-6a45fc673daa", "indicator--41d41063-aa9a-4513-b49b-e48bd966f749", "indicator--237ed1d3-8e8d-4516-be1a-58703452fc7d", "indicator--d93c7bd7-2e5c-49b0-9117-d35107fd746d", "indicator--30d887ec-3aed-45a6-bec3-d83fcf2b4d9d", "indicator--54c61103-59fc-43a7-9fdd-daeb22417e4f", "indicator--f50b46f4-98a0-4fb6-9b47-79b72a24a16d", "indicator--d547c927-898a-4fa1-b853-9ea0c85213ff", "indicator--1e99cc8b-f9c4-4824-8396-31394378ee2b", "indicator--67c0b669-54ca-4904-a3de-d9b76bd0059b", "indicator--a8c082b5-0392-4cf8-bf34-a0a1f3ce0f78", "indicator--249107e2-3263-41bc-b401-f3ea73db6f0b", "indicator--2ab783c8-7888-4d6b-8b4e-0eccfc4fb235", "indicator--03da2076-39e8-49ad-91de-0cb4ab5c8856", "indicator--e1b5089c-ed94-4181-8b6c-6e2e0deb0861", "indicator--03895a2f-1996-406a-ae77-4228859862b4", "indicator--78954a94-f2fa-4213-8fbe-e3301a848109", "indicator--500b31a4-6e72-4c6e-a79a-cf8f75a50654", "indicator--ea94960c-7d0e-40d0-9f3e-94c469602945", "indicator--0f183073-a150-47a8-b45b-6b68233ccafa", "indicator--39526ad5-fb0e-49f2-9c74-4032d04f81e0", "indicator--2d61684d-5759-487b-9873-13bb37f67294", "indicator--6fe50f00-a0b9-4e28-bb2a-bcd24bff8321", "indicator--38587249-835e-4c41-85b6-66aa3c563dd8", "indicator--82d1c5a1-8945-4b74-89e3-ca8a89d90f57", "indicator--33b3673a-01eb-4c1b-9659-79bd7bcfdac9", "indicator--b9f0203a-7964-4d0d-b6c3-13fc256a3674", "indicator--508927ef-774f-483a-a1a4-10a33e37b403", "indicator--1fa40c27-9277-4922-8c01-91c33dc17cb9", "indicator--0ed4ca35-ef04-49fd-853b-a26332ad3555", "indicator--84bccbe6-bd5c-4023-88a0-653ef7f4baac", "indicator--d2a09d59-dabc-434e-a157-ca8e52f98b43", "indicator--00aa5a60-7d61-45a4-8bbf-e51e525a2e6f", "indicator--d6fda904-8e07-4acf-991a-7e8fa32775a8", "indicator--0825719e-d823-4de4-a410-ddc1e5665c61", "indicator--832b8a8a-b283-49c5-85d7-e1988c3f8c8b", "indicator--e1868a4c-7d4d-4960-ac30-79830e9ae003", "indicator--7ef41b9b-b167-4182-8081-8b01365983c8", "indicator--6447898d-a596-47d4-9efe-549567c99236", "indicator--227eaf39-83f8-4b52-95d8-266ea10de50d", "indicator--5a6f2d1d-65f3-4ad1-8d36-efbd9d11427f", "indicator--9f09b0fc-4166-4410-b2e8-89a820c82e6e", "indicator--4ec27216-be39-43cd-a04b-cb51bfa5e47e", "indicator--349398da-78c5-4f83-a9fa-66081a709efc", "indicator--7ca8aeac-ac7c-446c-be24-b50df34dbc12", "indicator--6a2defbc-bb98-471b-8f44-012d5b0fb59c", "indicator--ce550d5e-17a8-4303-9258-0562b20625f3", "indicator--815338b8-fdc5-4b35-99cb-fa2432cfbfa1", "indicator--06056108-8ab4-4fff-8b27-5356e79cb0aa", "indicator--6031f4b2-50a6-46cb-a07b-7ed65a8eeea3", "indicator--e3b4f1aa-283c-4ea9-93ef-38fe6c46a996", "indicator--6a77006e-26b2-4fa3-8c5c-97756af51a65", "indicator--80b61f5a-26db-4049-abfe-40954f440261", "indicator--dff71c07-5f93-447c-994d-4a95ee3fd87d", "indicator--1de8b037-b82f-42b4-8c76-e42836725efb", "indicator--a718c130-fd03-4a08-bfab-f296a1595ef9", "indicator--54e6455a-716e-43f9-84b0-f8f766cf3b79", "indicator--88139977-895e-445f-bea0-871c82a87a21", "indicator--96315655-a703-40e5-9ca0-f9337623abed", "indicator--520181e9-645a-4765-be08-1781d1be914f", "indicator--f600375c-97ce-4fb9-8fc3-78b015a1b8c4", "indicator--f5b46862-700d-4bd3-a8fe-572c5d8ecee1", "indicator--a6e69bcc-f2e3-4fb9-9364-08e6d7fc12d1", "indicator--1697d245-e4f7-4b24-a253-6efde028996e", "indicator--337b7bad-e359-496d-8e44-ef63796df82e", "indicator--735ce1c7-52e7-4375-af5f-e05c97c531b3", "indicator--f5b9efa8-4154-4946-818e-315823a790a1", "indicator--6ed3859c-a7ef-452a-9592-c92eddc172f0", "indicator--5f2e5480-ad9c-4204-aa5c-6ae929b9ce41", "indicator--feb8533c-0623-4fb8-97f8-13fac87cc3fe", "indicator--fe6de35f-9b69-4340-93a4-e389033dce9c", "indicator--42759fca-01b4-40a2-a498-cce30bb9a59b", "indicator--b894e67f-27bd-4094-9aa9-7f7623221f2a", "indicator--0e706216-b1e1-49d8-8b37-7076aacfdd2f", "indicator--b1e34d45-4f83-49a4-9ffa-01dde3c1c0bd", "indicator--1785be98-f0ba-4ac7-838e-595584123f3a", "indicator--96570381-a282-4617-98e2-8bc11b80f3e1", "indicator--b24cc307-a286-4e9a-9a4d-fca04ecba185", "indicator--7858a68a-4b8c-4039-81ac-401628455ecf", "indicator--0edbe432-d87c-49b8-bb33-fe4f6d5aa841", "indicator--db42ed17-8bb9-40b8-9e64-7916b3770b73", "indicator--d70535bc-2868-4b3c-99c6-c8d861a6288a", "indicator--71b75287-f16f-485d-b743-f8fd84a745c4", "indicator--46238296-956f-4db5-9e1e-7777f291bbc5", "indicator--b61c08f4-a320-47c8-8b8b-68c67daa84b3", "indicator--26afec38-adbd-41f2-8196-2d4a378d8a14", "indicator--a2933653-575d-45ba-b100-7c794fa10533", "indicator--029d24c1-fe06-4c2a-b8ce-5c3c13ff41cd", "indicator--00ca365d-4eaf-4c59-a30a-fcb0fbc94e0c", "indicator--5abdeaf7-dfa7-41db-af7a-df6046c8eaff", "indicator--6891c0d7-f31b-4fb0-9f79-cf4b0f674676", "indicator--bbd505f5-bfc6-4b60-9df6-cf91b9ac0efc", "indicator--ffe0523f-4d4a-48b9-8154-a5f31e87c33a", "indicator--87b71765-9c1b-4caa-aaf9-4715b0be98d2", "indicator--2335d91e-1a37-4190-9141-91c91e3f524a", "indicator--cfd03910-a21c-4def-8631-d54d1d23b4b0", "indicator--79f0dbd8-f3b6-44d8-b905-d27b4d5708c8", "indicator--6f7dafce-9070-40e4-bb82-f27da1b4f345", "indicator--a96b5539-4065-48ae-ac86-36e8fdff268f", "indicator--8338276a-2aae-4ff0-98ca-ee2615a01389", "indicator--355cfea6-221a-4c11-ab0e-32b85d97f39d", "indicator--641e66cb-2621-454c-86f4-b8501b229964", "indicator--f29312c1-9cec-4ba5-8886-ce62f6232ec5", "indicator--194c4812-b992-4134-8b64-f12557d0556f", "indicator--6a7af45b-aa53-4f9c-ac47-e98d3ddea9be", "indicator--54223741-2da2-4eef-b2f2-30fd74b2d2d9", "indicator--87b9cc83-e055-4114-a247-73982a6c07c2", "indicator--446f6d10-d1ba-4886-b2dc-7ae077fc1d1b", "indicator--d35a54f0-6fd5-45ec-bb1c-2d49c64e9c74", "indicator--bbd846e4-353c-4ddc-b484-0698ef40fa52", "indicator--6494d970-62f3-4141-82f2-01b8ec05af7d", "indicator--9ee7951d-3ff0-43e1-b099-544d97b66ad3", "indicator--bc90c144-f22a-413e-b60c-1aa6f517c29e", "indicator--89dbc3e0-eccc-4c26-b05b-8444bbeed06a", "indicator--f6a87a16-ab0f-483e-94a3-29b7b71487bc", "indicator--c0cda7e0-c1de-4824-a022-4f571076b926", "indicator--48067613-8424-4bfb-bf3e-2c10624ae6fa", "indicator--44f74a74-c53f-4e15-b4bb-b9019e5b7637", "indicator--dac345c5-2ccd-40e1-afcf-11984e18950d", "indicator--835a08f3-1680-4f11-80bd-363dc8db4442", "indicator--66253745-ffe9-42b6-a9e6-4ff4dd2b8c3f", "indicator--22d43310-10af-4ca9-8d65-5dd9e8c5f27f", "indicator--0dfa6f2e-894a-4915-be68-a9f1608d00c5", "indicator--6a04d421-b62e-4f02-9acf-df80cbf4943a", "indicator--fd315b0d-b9f9-44de-9798-8b19eabff49b", "indicator--3d4793bd-5cc8-46ca-b566-8a50cb2ea254", "indicator--17bcb537-cb01-4425-bf9e-6848792f58b9", "indicator--f85a3e1d-d8a4-4458-b0e4-f925ecb5999e", "indicator--8491f311-c290-4255-874c-b6cdfc3156b7", "indicator--666fcbfe-270d-4196-9c3c-2d83b77e345b", "indicator--7991d9bb-fc45-478f-85e8-0558a5a53c4c", "indicator--5cc53c12-d41e-4235-b38e-cdcf5a622179", "indicator--e8d7ba10-bd2d-4ede-8d00-a499b4027a4f", "indicator--90b89540-9012-460d-bbec-916222bc9138", "indicator--f9130e98-781d-431b-ba3f-9bd87021513e", "indicator--e3f859fa-c6af-4108-ad48-ce239a3d4318", "indicator--e9569c68-6b63-4a1c-ae55-14e0d76b96e9", "indicator--52bfb478-3f40-42bb-adc9-2ac13c7b93e2", "indicator--bc81382a-bfd5-4cf7-a7c5-32d1204e8d54", "indicator--a3699c96-30e0-4781-baa1-77ef8395c48e", "indicator--f31cc814-0bec-4e5a-a02c-ba67f14a7a2d", "indicator--b4fc6434-5a77-4940-be03-1c17e2e58587", "indicator--c8a1f8b8-dc57-428a-a46a-994dbf4656f5", "indicator--9022dbab-e3e2-4880-bc74-48497e52fc87", "indicator--8553ab51-a095-4da2-a824-9f76b69127ce", "indicator--06ebfdb8-1a15-4c8f-b59d-3f117ec19b13", "indicator--695dd062-83db-43fc-b16b-9df121d977f2", "indicator--6986d734-dc3a-402b-a455-fa333b4611d8", "indicator--fb73e46c-b953-434f-8e1e-1aa6e2e1d533", "indicator--302fba32-44b3-4b07-a5b1-d5dadf8b51ff", "indicator--4c373d30-f0ed-48ef-b2cd-00f0050e6961", "indicator--8e9bec33-4140-449e-9002-8c453d0f9af2", "indicator--e8bb3c41-ec91-42dc-baab-9e0ed8ab5dfb", "indicator--7e630fdf-d530-4549-9746-b8db411f796e", "indicator--b4dd49e4-2cdb-4195-81ba-cc040d226907", "indicator--af48db7f-902e-4515-af76-dbad51bc9ef8", "indicator--ab10a503-2928-4707-96d6-46b4592728f2", "indicator--84a118c9-eaa8-4b9c-8e19-7224395250a0", "indicator--cb9548d0-9d79-41f2-bfc8-542e16f8f253", "indicator--e7e7d62a-a382-4c9b-a7b8-a789d79ef286", "indicator--5b60ac88-7e2a-4dc8-990b-d65797b795a9", "indicator--e8c695a2-c416-48e9-b537-38814de814c4", "indicator--e91e8618-032a-45ea-88aa-3ea8637aeacb", "indicator--5073e167-d7af-41d7-a506-5475e30353fa", "indicator--4b9d43ba-f92f-483f-8b81-f73e1d1c4b09", "indicator--6f874fa1-ca95-4bc0-a746-4fb910f223e5", "indicator--c9ceac2d-8fae-43b5-ab74-67ed91fe18f5", "indicator--b0b3acee-6e9f-4122-a0fc-c67bd468ccb0", "indicator--2ec3417b-04bf-4879-ba87-3ca6efef4f47", "indicator--bd621dde-4b04-4538-8475-1792a5045d5a", "indicator--0e4c326c-9053-4f42-8465-999523c9a295", "indicator--9f1f0af0-38d2-43e8-a76d-8d0688aea3f0", "indicator--714cda09-badd-4eb2-870a-923c2c926fa8", "indicator--8ac7af76-81fd-492a-a559-f9e411cc7503", "indicator--943822f5-6e80-446e-8890-6d06503414f4", "indicator--a7dc8dea-ff38-4f36-930d-e2c3fec0338b", "indicator--9c8a8ab7-c541-42a2-a59d-e4ec6059bc45", "indicator--eb3d3bbf-2dca-4d38-acbd-a0c155ef5345", "indicator--c0da9567-279b-429e-a3c8-3bad467d4736", "indicator--912246d7-d878-4e65-b836-39434595142a", "indicator--bfd5c049-7984-4c8d-86ba-787d8acb3ee9", "indicator--8a4c4c86-ebbc-4c26-8dbb-0d4ae7cd461f", "indicator--e7a97602-11cd-4e19-ba59-b390dbc05e73", "indicator--a7b7b5d3-c239-41cb-a453-7ed0f1202063", "indicator--9d1abd90-7963-4b25-a30c-245ccf139efb", "indicator--4a65990c-cb50-435a-97fd-eefe08cbe788", "indicator--c5e8cecb-9e02-44a3-a5ef-04fbb38765c3", "indicator--0c3fd7dd-50a2-4f23-a998-3c94b7749fa5", "indicator--55bd97bc-ec22-4c0b-bc77-a750cdf04005", "indicator--3bee5069-66b2-4e63-8c7f-480010f9bc0c", "indicator--2933bb89-84ed-43f4-a245-c11a8e95cc69", "indicator--0bd6225f-42b7-4bd8-8edc-ff106e0833b4", "indicator--115fa984-732e-478b-ae1b-c023c1b0dd25", "indicator--7c493a4b-244d-41bb-a72f-90cef3514cb6", "indicator--07dc886a-7f0d-49e5-9009-781ac1f04a55", "indicator--b1328d8c-9d7d-4099-a5b5-e60d530b639e", "indicator--f289f092-f5e8-41a0-b243-2469034acfed", "indicator--dfe5bcf8-1d54-4a7e-9bc3-d7f7e19bd357", "indicator--ddc67a9f-de1c-4e4f-b7ae-85509136454e", "indicator--f56078c0-1059-49fb-956c-cf53283e0521", "indicator--dbebb403-5dc1-4e7a-81a1-ac484d894987", "indicator--9d4ff465-535d-49b7-b601-c999c5df9caf", "indicator--3962d42a-481a-4a9b-8b86-a35b6be87298", "indicator--772c4bd1-abe0-4de4-b388-228be6d91741", "indicator--d581ce69-b2ec-418d-9ddb-9ac16a3478d2", "indicator--d35cf13a-2ece-470b-ab6c-29e02b88e28c", "indicator--67fee0c4-3eef-464d-aac5-227790a27e49", "indicator--d81028f6-6e8e-41f1-be16-387d7444fa5d", "indicator--1051b66d-cfce-49a1-bbf8-f70e2b9a9167", "indicator--9fcacf40-14d7-4419-a1e0-6bd45d0c50a0", "indicator--ced1301e-ccb1-4cab-973b-1c747165d949", "indicator--abbb2485-b200-4dc5-8640-31a0b7a29d08", "indicator--98f8c85f-7105-4eb6-87de-c1f14f2ee044", "indicator--ca85e0a1-f5cd-455d-8147-4253858d9b28", "indicator--39fa69da-b516-486a-a395-1c76343230d8", "indicator--bbdcc8b0-ea3e-4679-9a05-2c34e38f1cea", "indicator--5d8143bf-052f-4503-bf98-6afd5727991f", "indicator--12b98bc0-83de-4fa4-be8d-4848d6a47549", "indicator--5c5124f6-9b51-409c-866a-d78bd359e6e9", "indicator--5aa48c01-74a7-4fc2-b019-2f82ef829cfc", "indicator--12dbe873-f73d-4fff-9d51-195999ffc854", "indicator--b26c4e1b-a39e-4d5d-828e-dd0d9c576a8a", "indicator--9ec182ee-369f-4f4e-b880-91fd00ad1ef8", "indicator--5f2bdbb8-46a1-46ca-925f-123c3f3417c2", "indicator--f070d47b-f931-4fcd-a6c6-d2d2d230b1ce", "indicator--e7a3c0be-7ade-40ba-a43f-e549144737f6", "indicator--312eae8a-c223-414f-91a1-15d6ee28f15d", "indicator--2fe67dbd-775f-423d-b040-b14589de0dbf", "indicator--ddc36a9d-507f-4b1d-bea2-2069bffd8ffc", "indicator--681e94ae-2255-433d-955f-24e213c7e6cb", "indicator--b0c0b973-b50e-4963-b5ff-ca24ee7a351d", "indicator--18fef5c5-ff2b-4fd0-9394-37496b39f2a4", "indicator--da64f65e-2340-4379-a31f-056a9d25e2cc", "indicator--6c10fbc3-7a35-4b50-b9d6-ac1beacedf91", "indicator--e77a8e64-65bc-40a3-8ba8-de349ccb7cf7", "indicator--b7eff9fb-77f4-45fa-afff-30f1d8dae519", "indicator--6ff6dc20-40da-4105-8ce2-1c4eb5add0f9", "indicator--1c4edb2b-4a6a-4b95-8fab-9ca5d06ad1af", "indicator--76fdb985-7958-4d07-84a3-6fcdb35cf8be", "indicator--3de4a0c6-7db0-4192-8e7d-23b83ae4f21f", "indicator--cab146d6-802e-48fd-8b73-ef8763affb56", "indicator--59c30794-ce4a-432b-819c-11c9d4a558c7", "indicator--12fab036-75c0-4135-b9bc-62b130f22f91", "indicator--2c6f76a8-d9a3-4c3c-9650-a02267011955", "indicator--fefc8423-9f82-49bb-bd87-780cc6b4b6b5", "indicator--0ab1ab4c-e983-49d8-8010-c94d2f7eb05c", "indicator--aa860e95-e57d-487d-9ca2-e2eb7395b751", "indicator--04ca299a-c5ca-4230-8eca-e6966b0dcca8", "indicator--51776d1a-91b6-4b5d-9955-19bd72cf3f1b", "indicator--c179f307-260b-4140-ae1f-b1830630e5b2", "indicator--c78bcd09-875a-40b8-8fb8-1cfee220c9e7", "indicator--6a1a0dcf-ce96-4148-af18-12d9b0b4fbb3", "indicator--982d9276-de3e-405a-971e-fcf97e67bc7d", "indicator--4e72d7c6-4386-45a5-981f-69ba852a3451", "indicator--6aad18b8-3bfb-4da5-b67b-f9b5028059ba", "indicator--f3a60821-a96a-4c37-be47-787ecbddd3a9", "indicator--c6a16a1b-0878-44ea-9b9e-61ea04a89a79", "indicator--d419d83d-273e-4f2b-a5f0-d7ea14730f01", "indicator--7a21b9f1-5a3b-43bb-bf7b-8fbb1862b7db", "indicator--f4abdd61-5e6a-4147-808e-de0d669aeeb3", "indicator--9e4c0f2a-e6f8-4af2-a770-6ff15e876633", "indicator--33e57c4d-fca8-41fb-8742-900d813a983d", "indicator--4a55b0e6-a81e-4b11-a366-b9b63a02a87b", "indicator--7f4e69e9-36a9-4c3e-b7b6-b8558b6989b5", "indicator--c9b6138a-6d7b-4f31-9d64-e7849a607e6b", "indicator--005621e4-a362-486b-9fc1-b780e3af33d0", "indicator--d231527f-adff-41cf-974c-0e0153c1e539", "indicator--78955f44-33c8-4ae3-b903-a6f5a2be5778", "indicator--d07d0030-8881-4666-b5fb-209f9dd7ed88", "indicator--33ca4132-9991-44b8-b32a-0b0e78f562aa", "indicator--527e423a-33dc-4884-b5af-f86b4a7e3703", "indicator--82d1a3b5-3ece-4a0f-8a15-bd76da97f827", "indicator--350e3848-4839-40d6-860a-8f7080010323", "indicator--e99bf0f7-c14f-4644-9676-f898c5c8b338", "indicator--0440e4ec-0384-4794-888d-b38211d4f44c", "indicator--7e6113a6-bdc9-48e9-b415-4276c9ff1885", "indicator--85a6ea08-8ead-4462-8216-1b58d83173c9", "indicator--9ff4c3b9-2a61-4da0-8016-e363d10f5061", "indicator--26bfd3c6-00b5-42ff-bfb5-0d69fc6b04c5", "indicator--f9fe3350-650b-407c-a7e8-3d647d2a16ad", "indicator--f0cb9760-40b6-4306-8dae-979ef6dbfe57", "indicator--979fcfbe-32c2-4ced-bc6f-3c6aef7070b0", "indicator--9077e5e4-4b51-42db-8b9b-5d76f7dc7aaf", "indicator--e93d2a78-2ffc-43af-9983-f9940455a124", "indicator--8076c613-3938-45ce-982f-24b3ed40e284", "indicator--1a2cf0b0-09db-470b-8ad6-643039141ce5", "indicator--ee09aed3-2d6c-4d62-b674-d80c3893e4ee", "indicator--6e429528-36b0-48d8-a1ec-235dd1b19b3c", "indicator--4326ff55-e8a4-40eb-bf35-2735011d8aae", "indicator--bfd0146c-628a-45aa-8cba-5f1989a53a6e", "indicator--970d3ed5-3711-43af-b211-1879ee6a419d", "indicator--d13439bd-a2da-489c-8761-40fdf0521e9e", "indicator--2712e681-fd60-43ac-9be8-dfd6e8cd7c32", "indicator--fc3f1a05-4602-4d64-ae23-318500d556c8", "indicator--df57680f-31b2-4203-805e-f524d7ac2ea3", "indicator--2891a2d5-6ee5-4c16-9635-27fcce9cad96", "indicator--e8ee80fe-d2b6-4946-93d7-70c86a4a63fb", "indicator--4dd79092-9a24-4c03-b842-cb33f5ec5286", "indicator--5479c145-e4df-41ec-80e5-97f5758c1783", "indicator--1cb41bf3-e6c9-48cc-9f51-25afadd9eaf0", "indicator--f90c12e0-a67e-4c8d-b111-bed0858b4ffc", "indicator--181c6538-bda4-4e41-bcbb-37bd2f91f19a", "indicator--857b69b5-4eef-4374-8867-3cd5d8d8b988", "indicator--da38a66d-3d92-4bf4-8d7f-160415b7b289", "indicator--4ba94e5c-234c-4066-a87d-4bc94ce63675", "indicator--2512bccc-684c-4337-85d8-c297d38d1192", "indicator--36109f04-1355-4773-a82a-1d9fb6ce8fbf", "indicator--1b98bb21-dfe1-49a4-a60e-b7c6a94f2e0c", "indicator--a23801f5-aa0b-44df-9783-c8b06377c036", "indicator--7044dd88-bcec-41ca-a855-49581416f47c", "indicator--b0aca66e-6434-45ce-aa75-97d5ea8261ff", "indicator--c1bc1242-89c8-4730-95a2-d24f07cf43bb", "indicator--6f68e88c-619f-4c99-a025-bc65a0eb6d65", "indicator--4d93fdb8-7767-4369-a8d0-d371e49a16e6", "indicator--6c517ff1-6b5c-4dca-ba7a-d5f87c396fd5", "indicator--3cb79d9e-a423-46cc-86c4-f7710944e5fd", "indicator--59d65a56-8218-40cc-b237-9c891f21d0bc", "indicator--27af559a-8e46-46bb-8945-92c5fa254360", "indicator--e7169299-3b53-467d-a2ab-f067214605eb", "indicator--1b43528d-0c38-40ec-be65-18b3471e1a96", "indicator--e3be0721-ea94-4ca9-855c-cdb7b7b63418", "indicator--7f1fde2c-3669-443d-9873-c1cdcc7deaa6", "indicator--9b0eed7c-2a4e-44da-b903-c3e7fc564641", "indicator--1ac953d1-3928-46f5-b203-105651b20c3a", "indicator--01fd86be-038a-4210-b089-bf678a84337f", "indicator--9a07717d-cb8d-475b-a47f-b68d9d85a765", "indicator--bdaa29f5-5b85-4049-8f0b-99a91c06d39d", "indicator--4431cc35-78dd-46c4-8547-975eb70034ac", "indicator--1798db28-7629-4f64-a814-c44c2a4937c9", "indicator--f08559f8-6443-4fa4-b226-273075b7b172", "indicator--9d32fcd8-78ef-4c0c-b12e-c8586a8357e0", "indicator--ec6a4948-2f67-4688-8723-714f3221728d", "indicator--e972f2b5-e00c-4a50-92f2-a8edae1ad595", "indicator--2e73bb00-40b5-44ab-a99b-1e78c3536d6e", "indicator--adf15a05-c585-4225-9394-5022ba75b843", "indicator--cac59d02-0468-4e7e-a34a-015eaeee7da5", "indicator--5648c7a9-3bb7-4a5f-882b-80ea8bc1378f", "indicator--5504a14f-daab-43af-9190-da55a6ad889f", "indicator--300097c6-5996-4813-988f-8ad638680618", "indicator--ca11ad29-db10-4c29-8337-8056775ab925", "indicator--a5254ea8-e24c-4acd-98c0-93a01cfa0ecd", "indicator--33ad5c09-630d-4967-ac40-6d2f0a4d21ba", "indicator--daf69cae-15a8-4f54-bf9c-2e7ce7786ca6", "indicator--69afd2df-ac9a-4fdb-b10f-0c1f77a805f7", "indicator--b2656686-e33b-4c7c-b25c-f49e7aa254cb", "indicator--e248310f-f674-4a24-bb03-4fc87528f908", "indicator--496bc7f0-14d8-48a2-8fe7-1873c86ce55e", "indicator--3e5d71ef-1d79-45bf-ad15-59305f2e8eb8", "indicator--94a98869-31a0-496a-b45e-7d747ffb200a", "indicator--e1edd466-e1f8-43d4-b123-5cdf9d44bc3e", "indicator--fc5d944b-b825-4d3d-9a98-d869b5b9cfe1", "indicator--5fd3f16a-224f-4059-b8ee-66ae8f9feb25", "indicator--aef37f71-10fe-4499-a13f-1aac6f9435cb", "indicator--921081e6-f3eb-4645-9099-c3838b3293c0", "indicator--450225a7-5b15-48a9-bd4c-9d4c491177da", "indicator--fbf4d985-5040-42c3-bfde-ac56a3832245", "indicator--08bd10a3-cd38-403c-bd21-b4f63ba0aa5f", "indicator--ff3506e6-e27a-4d34-b8f9-1174058494f8", "indicator--744c6cff-4430-4416-b9e4-a36c9a9acc95", "indicator--1fe8e4d9-90e4-40fb-8b0c-6d71a774ce55", "indicator--fce13511-338a-4b0e-96b6-3e3835a0db55", "indicator--87741c53-9e91-4bcf-8ff0-90f7e98e5e4b", "indicator--50bd077e-5e63-4d67-8d69-4dff4a20c127", "indicator--a482d033-8211-4220-8b90-4066cb1ba20c", "indicator--2992ad9f-1288-49a4-b087-78330c25269e", "indicator--40870b0f-c635-432f-8747-aa742de2252d", "indicator--447a7613-f5c2-4b65-b153-9313da449bfd", "indicator--8ec9e69c-1066-4925-b54b-56ae2c51c165", "indicator--7a8c05c9-58f8-453d-ade5-23772df23af7", "indicator--b350a66d-c68e-49ad-8835-c03f17d9258b", "indicator--1ab17cf4-3752-4842-a19e-ddfa912e8f91", "indicator--a447f12a-33ed-4c27-a05f-1ce6bba61f17", "indicator--eb1ddff5-1dc7-4af3-928a-1be5312514c7", "indicator--452f8aa4-e455-4e58-b84c-18da9fd319c1", "indicator--34ec926f-1802-4b8f-8d7e-4ca1452d3821", "indicator--a124b0d2-d85c-414b-b984-4853485c0be5", "indicator--376a773d-f446-4ed1-8c68-ddffea68d424", "indicator--f8def8fe-adf6-43b9-891e-b677a9298f06", "indicator--d70c3504-7677-4f2d-9348-3efaaa73a4cb", "indicator--2c7032d7-fbec-476e-8a92-8dd99a6f373a", "indicator--3aa4b131-72ec-4b08-bab4-b937c3e2feb0", "indicator--5f3acf8d-4080-4500-a58f-f91f2c9c41c3", "indicator--debadb7e-15e4-4d0c-8387-d6f3bd830253", "indicator--1151b66d-64c2-439f-8311-674dd31684f0", "indicator--8c20d865-44c2-442a-b07a-a2713ab5a93b", "indicator--bc0834e3-c509-417d-b5c0-eb7600c18b7c", "indicator--f485b58a-81af-4fa8-ac6f-49f00492fd8c", "indicator--2ddf9c51-7e8c-4319-9a2e-bc239cc1d4e2", "indicator--b5099d81-f8d9-4898-91a7-f793ac790dcb", "indicator--1d79c85f-debd-4445-94fb-a50e71b0904b", "indicator--6da9c73f-afe5-4595-9097-1941fae3dad5", "indicator--fd8f0368-e98e-4256-8588-ec78d04ac913", "indicator--910830bd-6c22-425c-a8f5-b3feda43c6d7", "indicator--44ffd45e-4c49-4f8a-b4e4-b9eb9befc447", "indicator--7391a5dd-4ef5-4d56-b052-8e15d878eb59", "indicator--f441385c-9250-492b-a1ac-3da999339387", "indicator--7730308a-b851-45cb-a692-35dcd64cc452", "indicator--12d41247-7f8d-4aac-aa58-8fa31ab12255", "indicator--25967986-c06e-4dc8-a5ed-0409a162fd72", "indicator--cdc11a35-b507-43ef-b44f-053c3dc38661", "indicator--4269a439-adbe-46f1-b348-8140ffbfbe0d", "indicator--860fd03f-aa83-490f-ad75-38256113fbc3", "indicator--29525041-a2f0-4ba7-9785-b3b4bee9b58a", "indicator--41bf52ff-5ea4-440f-ac2d-1d5b5a8ee5aa", "indicator--24104ef1-7ddb-4044-9962-ea2bd712ef45", "indicator--152b239e-30ef-4b04-ad18-9bc987db4846", "indicator--91847284-b729-48ed-86c3-a5a7d90ee0e4", "indicator--fb432485-77d8-47a9-b43c-8de7bd181593", "indicator--326113ec-9534-4101-bff2-abfb4568e569", "indicator--49452b5d-8cdd-4489-a4e4-1c3a1dc7c1cd", "indicator--35b5633f-dca6-4f59-a925-50121448af4c", "indicator--2c23a7ba-070e-4da7-946f-dc14f7cb0b7e", "indicator--a57c618c-77da-4949-a449-9067572e108f", "indicator--f59efe31-fb10-4b70-8187-3734fded64a2", "indicator--8c2a94ac-0bfe-48c8-a82a-0e3e1794fa52", "indicator--91f7b6ac-685b-4815-b45f-66d0c91bfaf3", "indicator--be37c895-116f-4a80-92d3-0ca0b43ae557", "indicator--e76bcef4-c903-4f53-ba8f-df0957b3a219", "indicator--1bf21389-a805-4bc9-9de5-aebdc8461d91", "indicator--fb448864-362c-4eb2-80a8-a206c1ceeaf0", "indicator--98be96aa-0553-40fb-bf45-4a4217c866f5", "indicator--ab726e5a-eee7-4441-ba96-47323ab8d9dd", "indicator--6af4b811-e2c4-4803-8b2a-986649890182", "indicator--4d0df779-aa98-4a30-9e84-05f2830f6902", "indicator--d429ac60-094d-4bc1-b7b1-bd6af9760f49", "indicator--f4d4184c-9152-4b5d-a46c-b082a9316ed2", "indicator--bd94448d-a7a2-47a7-9a71-4e683bd74f14", "indicator--5698b99b-7155-4e96-a777-0afe5d8a2f68", "indicator--69c6584d-6dc8-4cde-8f68-7f3c3c1c3de5", "indicator--bf4c57ff-2efb-46bd-aeda-8932c77ff8dc", "indicator--a318e6dd-58c3-4e87-9dd1-61636fd2d447", "indicator--9b194183-70b9-4a63-88e2-a1ba150cc1e8", "indicator--7ac388d1-92f7-449b-8748-0964409ddd24", "indicator--4e8b54ad-76a6-4665-8164-216fc7040cd7", "indicator--86b31028-7a02-4f7f-9d8b-5fd125d45512", "indicator--fa8d7b17-f740-4ce0-9055-f2beb84bd49b", "indicator--516928ca-3b57-4424-bf92-a898ced04f1b", "indicator--78da7d55-8472-41b8-8da5-ef37ecebd36e", "indicator--834f905f-3001-4a8f-9f61-21f4a3dc54bd", "indicator--bb6e634a-c44f-431d-afdf-422101a91d18", "indicator--3bfacecf-da0e-4308-b19b-a8fbfca26f2a", "indicator--6a746c83-f667-4f7b-9ef8-6ffa2959a86a", "indicator--73171170-e42b-4c87-822d-a28d72ac2406", "indicator--5722f93c-fdb0-4981-b881-f6159b932cdb", "indicator--cf534b19-8225-48f4-b65c-ade23af1a3cd", "indicator--ce20ca28-7370-4f80-bc67-f2d03da9a2b3", "indicator--0fd8d813-a996-4dbf-9d12-2ced09513cda", "indicator--227ecaed-b2c6-4929-b1c1-ac5e623cb05c", "indicator--dda2675f-6821-461b-9fb1-917959a19206", "indicator--97a35702-4622-44f5-b3f1-185b9785b12e", "indicator--0dddd9bb-16c0-47b5-b013-25cab6487b5a", "indicator--98ad2cb2-11a4-453f-9eb8-455d60e0f96a", "indicator--a4b252f4-21bf-497f-8ad1-ce15f184df87", "indicator--17e82f49-7daf-4ed0-9e6a-06c9b816b115", "indicator--b8a55b0a-f33d-466e-a37f-7df061111780", "indicator--4f64188c-ab2b-46d6-8972-ea8b046e721a", "indicator--8a6cd713-3f41-4cfb-85a6-a7e337fb49ab", "indicator--39fd014a-4a4b-41a6-9a40-d0cb55c2ab89", "indicator--4fa088cf-cd9c-47f3-8a67-152478ff81aa", "indicator--c2c45738-5198-4347-bd31-4b10da3df270", "indicator--483b5d4b-007d-4c0f-8c09-0dd590bccdb5", "indicator--3e9e5c3a-5e25-4c5a-ab0b-224adb1743f0", "indicator--81d91f83-a856-40e7-9bbe-76ebfe54df83", "indicator--fc278aca-c518-4933-98e3-45292da485ae", "indicator--ab82f41e-ced1-491d-ad4a-21c71a539ae2", "indicator--e9a175a9-2da7-4022-9735-60c87764b121", "indicator--4e18e3a1-a9d5-43de-a633-008169c0465d", "indicator--b3501c7d-25f9-45f2-a306-493e398e6876", "indicator--146923ea-7530-44a5-81ad-09e92f676406", "indicator--eac5c32d-4480-4ede-88d3-a3f4f4370a5a", "indicator--aeaa46db-8157-482a-8aba-8824b619c6f6", "indicator--4ece81d0-6339-4c9e-8792-80fe09752f08", "indicator--922f5023-5a64-4728-b5e6-1a3c20303e60", "indicator--e2fe5e86-3c36-4f56-81d5-e0f41df90742", "indicator--4e03243a-b4fb-4886-bce2-dfd5ccd678cc", "indicator--8accf95c-6687-406b-83ea-9329680190e1", "indicator--3c68c87a-5f90-4ea2-a949-9efc74ce0d50", "indicator--ca0afccd-5397-40e7-9461-55c900a6966d", "indicator--fc9f82ca-8e95-47b9-9d7f-114669839818", "indicator--df6ae8d8-96a8-4258-93e1-81e0652a0414", "indicator--9ad020d3-04d3-45f9-a00c-c42fba025144", "indicator--c90fd0f0-a3c9-484a-8ae0-9b3d52f3a596", "indicator--a82c88b3-2e28-48ea-955d-a051b93d8264", "indicator--4b7d13a1-adab-42cf-9cdd-ba704e918de9", "indicator--38052f33-51f7-4b42-81b4-0f9c37b00515", "indicator--40093500-5ec6-4f85-809e-f2179e81b0f8", "indicator--d1c43046-33dd-4478-93d2-72b525dc6d21", "indicator--5dad0915-8be4-4cf0-a470-af872dbcee16", "indicator--5c5d12ce-ff48-4ec4-aca3-f6f0e41a0f75", "indicator--13c2a75d-f51d-49f3-b307-c798689f401d", "indicator--3c397587-967d-49ca-b0be-2fb01e3dad86", "indicator--dda2f93d-efc9-4001-84c4-96d055a243a6", "indicator--3edc4a8f-956e-4b25-93b7-ea741de4bf92", "indicator--6c456e5d-e400-41d6-9ecf-669555560e0b", "indicator--238d7311-7c97-4175-a8a1-64f6e619e1d5", "indicator--05c9c2c3-26a8-4b1e-a86d-a4ef26007b8c", "indicator--ebedbac7-b23a-47c6-87e7-e8c18fd1e721", "indicator--fda122ba-521f-4f96-9737-8a5cde4bee5b", "indicator--eebac612-5744-463e-a88b-cd46d27a9e8a", "indicator--0a4f094c-da6d-43bd-900f-fbb9f1a620b6", "indicator--19309cba-e6b2-4c16-a479-51a3ad94fa4c", "indicator--050f16fa-935e-4670-935c-ff14232e73dd", "indicator--8bf05fcc-7511-494f-b703-e48ed913d78d", "indicator--5ced0d4e-5014-4143-8789-a013d6e601a6", "indicator--66cc816f-72e9-4319-9454-a1ba22ff74a9", "indicator--d19141b5-f3ee-4452-b516-aa769fe09c2f", "indicator--2f7a552e-b391-4354-853c-41961b15229e", "indicator--f354fcde-bc57-4c32-8e0d-d10357b63b66", "indicator--382827d0-c551-485a-b521-bcb37d7d774a", "indicator--722d3b94-95c1-4ff6-90ea-3229af7abbae", "indicator--d12a4290-3362-4c2d-a90e-cc77e5c07196", "indicator--cf631c87-705d-4ebb-a582-3a072f9b85b3", "indicator--d0d6570a-8d16-4e6f-a7f9-92c926c79de0", "indicator--44235b54-1bb6-46fd-a9f7-52bb1b421720", "indicator--d5e81bd5-ffc1-4e2c-bc1d-62b18c9d6658", "indicator--f5f8e1ba-69e8-4907-8d6b-6cc88c96d7f7", "indicator--ef2d9ced-7c48-4e10-b0df-3d8e97938886", "indicator--15dc0bf9-77c2-4e0b-9fdf-25a4b18d05b0", "indicator--5fb95967-142e-4803-a7ee-4b6316927414", "indicator--e60cfb3f-53f9-4038-bea0-f8639f5dcad8", "indicator--3f6dbe0c-91c1-4c3e-9ba7-02872243a430", "indicator--e4df8a6d-6751-424f-9bf2-3c936c48dbae", "indicator--7b3ccf38-40f3-455c-954e-c918c33aebc5", "indicator--a6fdd07e-2ff7-41a3-bd6e-10114c9b68c0", "indicator--95562f1e-d777-44cc-8d1f-4e2a73c25670", "indicator--6ff93efb-6854-452e-80cc-37035fe507ca", "indicator--adbb084e-335a-4f4a-a45e-339935d74cff", "indicator--8d3ef7e2-5144-407e-b25d-b1675331395d", "indicator--4bb8b426-6a7f-4420-b307-d74d6b460d97", "indicator--4c75591a-205f-4493-8714-7619b632356c", "indicator--b41fa14f-9441-47e4-b18d-c2aaee6dd603", "indicator--72e020fc-e779-4e39-a82c-c9d4591c0fdf", "indicator--e32fa1a9-bbe7-4a81-801b-1193aafd995a", "indicator--e45bf2ab-24c8-4929-a309-f82eddbcaaf5", "indicator--7a7bda14-b071-4899-b49e-5f51b8f03c75", "indicator--4ce3e30d-e4f1-4caf-922b-4db9f8a2f25a", "indicator--decb8589-3ca4-4a4a-8def-e5c39096b615", "indicator--ecf7b11c-a79f-447b-9067-2e2d6f782c88", "indicator--d09ae6b7-82ba-4003-aeda-276bae9d35be", "indicator--ad5a5df7-ed70-474d-8254-74126eef3499", "indicator--97c73f38-79ec-417c-bf75-ccdbd1960a6d", "indicator--87ddddca-7c7e-47ee-824f-064af9fe7910", "indicator--2c724cdf-4ad7-4062-b0ff-4a9105d85ef9", "indicator--c568ea67-c8c8-4fe5-9ea4-bcaf90361fde", "indicator--83a22059-a8c0-48da-bd70-3c9d56100d0f", "indicator--0b866138-9b95-4bd8-a348-f5c33b6e792d", "indicator--460db471-1ee2-45b4-87fb-a7c5a221d017", "indicator--56193c25-499a-4582-8030-15a716f53d21", "indicator--32922ea9-e2f6-433a-9517-3946039ab7ee", "indicator--f628c8a3-b478-4cca-bffd-861158298d9a", "indicator--dd88bb60-c147-446e-9a64-05661f522ab5", "indicator--66f1c3fe-00f8-49d4-8b18-dc98b0c1d7b4", "indicator--0a1c51ab-71bb-4e7c-beed-497c5fb8f657", "indicator--315d24ad-b8cf-4dc1-aa3d-aaf657daf236", "indicator--03a357de-5166-403b-a922-5ec6839c42ba", "indicator--854de3fc-309f-45d2-b9cd-0c3487dc0a15", "indicator--7518fa54-bcae-4387-89ac-c0aa02c42ddf", "indicator--312645d1-d848-486c-9d39-054b7d2d0f34", "indicator--e6582a7b-28bf-41c0-be99-7c0725dff87c", "indicator--04d986c9-d518-4db2-adba-28bbcabfb47f", "indicator--7e313571-547d-444a-97a0-9f14326b9ae8", "indicator--d2aa3d50-60c4-4802-a67d-b03a83f49c74", "indicator--110d9c2d-3772-443d-a20f-00d3ba5d44cc", "indicator--98771d55-eadb-4177-973a-90a0c405cef5", "indicator--7f9910c6-fe0b-4b87-96ef-6e5c8673d86a", "indicator--e4aa9037-0d03-4562-a1b7-68ba1a2fae3a", "indicator--be7f2db0-d114-4c51-b9b3-52cc86bb211b", "indicator--dfd83e96-5ddf-4153-91d8-7004f573e510", "indicator--4a49dfdb-1f8b-4815-b190-295e5d9a2125", "indicator--ed0ecd45-bfc7-4743-8d0e-b1610e55fb1e", "indicator--8373e5aa-effb-41c7-87ea-86cf9641d950", "indicator--8e0d7800-bf5d-4deb-bc16-e0adf914aba2", "indicator--714fca1c-07e7-4107-b933-0f6164c753c9", "indicator--bc22fd1b-1ae9-48b6-ab42-096058b893c3", "indicator--bbd82114-2fe3-4c8c-80d0-d1401db7126d", "indicator--01ccf411-bfd4-45f3-a2d5-a4f998d84dac", "indicator--6ed980cb-04c0-43d6-b5e2-28fd3202c8e4", "indicator--8c4dc8fd-1096-4077-b79b-bfab3f07687a", "indicator--77cfb459-f41a-427f-b97d-8e8a906fa716", "indicator--6b328b0a-6d9b-4d56-a63e-ebe6601a24fc", "indicator--ec48bab6-8713-4679-a598-f2965ca7a034", "indicator--edf27e04-b42d-4ed0-819a-0ec79125029e", "indicator--815f8696-955c-41c6-a5f9-a556e304325e", "indicator--707a2a39-d7e6-4507-9b4a-8a249333f8a7", "indicator--f3a2666e-e926-4aa6-a755-55d31e48ecb1", "indicator--a056c825-b3ad-4e4b-8f99-e102fce24918", "indicator--6bc18aee-dc52-4f68-ac66-e2485d3b17b8", "indicator--b14e384a-3c4c-47e4-a5ab-c0072f85e540", "indicator--68713da7-49d2-4fa6-9cd8-138e5c6fe7dd", "indicator--bbdf891b-db56-4c77-ad48-96572e753c98", "indicator--ecd473d7-bda3-4e36-a815-37160b8b223a", "indicator--6ccc3159-fdcc-44b0-bb33-eaf69b6b0e1a", "indicator--8d0b2ea5-8774-4877-8c45-cea7b0c0a583", "indicator--81da3323-e8c5-4229-bec4-13b40e3d2d9b", "indicator--79fc903d-8c01-4d37-bf8e-50fd5bbfe6e0", "indicator--2da8eb36-87a4-42c3-854f-09f3a11551f2", "indicator--4f1d8639-6fc4-4b7b-9f1b-83b51c3504c5", "indicator--93d0e39d-b447-4b28-9450-02deade85e4e", "indicator--b52b7078-ed3b-416b-b28b-9b11f61b1222", "indicator--6a7619c6-979d-43db-832e-bda51c8bb259", "indicator--beac1e0d-19aa-48c1-8985-2b84acde04cc", "indicator--60496388-8366-4062-b32c-a41ad61febd6", "indicator--9de2938d-a07a-4ab9-9d6d-2165e64be457", "indicator--2560fec5-b7b0-43b8-86b2-24d808f1be31", "indicator--b3bafccf-4ab9-451d-af77-83fdb8b59884", "indicator--3d4ae863-0d9a-489d-8f53-9cf9b6750b16", "indicator--022d6d55-1d1f-4e32-94d9-b6180a9d7b2e", "indicator--2004887e-3c2a-4cc3-892f-5145a109232c", "indicator--0c4ce4e1-843e-45b6-bf1f-d64dd852814e", "indicator--f80479f3-4738-447a-914f-2065dc44e1ba", "indicator--2ee5cd3c-26b8-48e4-b950-71d20fa770ec", "indicator--f7d6364d-4804-4d2e-9f8c-99bb2c965d28", "indicator--a3343dc5-bc53-4b42-a85c-e0fa8dcef5ee", "indicator--b57a31b9-15df-46d0-b241-707f69cdacde", "indicator--3741e688-f700-4f07-acee-d6851afb723e", "indicator--94b6ca1e-2efc-4691-9652-984a830df4b0", "indicator--c1d680dc-6f87-46a6-9813-7ad6a0c79436", "indicator--d5aaec83-0014-46fd-8ef5-8c7396743f34", "indicator--3c2a9625-fe31-40d5-b292-f63bcac2b72f", "indicator--bd837594-74d5-49a1-b150-5fde2ca0b81d", "indicator--7debcb56-9ad4-482c-86af-f72f7df9d282", "indicator--9188dd93-13ca-43bf-8208-8714baf1746c", "indicator--f599f29e-90d6-4cb4-ab84-4ce889de7187", "indicator--bdf9c784-03e0-4c58-adeb-25d326f8b372", "indicator--65f2c2a7-2394-4f6c-8010-f949482d976b", "indicator--55012448-1163-4f66-94b6-39b85b033ff7", "indicator--061d7fa8-27c1-4c1d-b50e-3b41a1fecd0c", "indicator--f9878c93-0a0a-483c-a999-fa01713b0675", "indicator--2d1550b6-1e94-4131-8b68-f098f8252e95", "indicator--04856758-c2c6-42c3-8ef7-4db245a3e20c", "indicator--2c9cd995-b9eb-4dab-a61f-dcdde3dc4f73", "indicator--a9a19123-be5b-4a5e-8967-253ac6b25818", "indicator--e98b78ad-c17c-4858-ac0a-fe374f83aadb", "indicator--5477da9a-f684-4f04-9eba-74764bf1bd19", "indicator--78db42d9-9e1a-4fc5-8d37-f0080a8d93d0", "indicator--8b2c5d4c-05a1-46b0-9ac4-9a52faaa94f4", "indicator--ca917798-1f52-4e8d-a68a-7bd156caadae", "indicator--13da788c-b2f8-4584-9f4a-06740bd81ab7", "indicator--b48d4df2-0e8b-4162-8311-f47ab27afce0", "indicator--593f2247-f7c6-4242-9da1-bb0d5ff62143", "indicator--874bfbe9-7afb-4e4e-8c3f-bc167373e002", "indicator--9703d1b5-30f6-4426-bcca-2dee6e1bd729", "indicator--4808a23a-c9ed-4f45-9254-414b48ef45b3", "indicator--69abb578-5c1c-40ab-8a3a-e3a4c04ebf43", "indicator--b732af2d-e589-464c-b6bf-8c3a8ea1ac10", "indicator--fe631e81-0bf5-439d-ac67-aabd2dbada2e", "indicator--18e685c3-4202-4f34-bddd-b5b6e9436083", "indicator--77940d36-660b-4cf9-8e6e-644baa85def8", "indicator--c08710e0-d958-4d45-bcba-7eccc178a2e8", "indicator--3e02e6e2-6dc6-48b0-b547-b4d5ba7f2f7f", "indicator--23b4afd9-93f6-44c9-ab5d-5126a71b3364", "indicator--111f4504-d738-4bc5-b7f2-3eec07962be4", "indicator--ad63f618-9e50-416f-a34c-0a33cae34161", "indicator--1144b641-a38a-4c0c-9df4-9e7b88bf2cc5", "indicator--b4463e5f-be8c-40fc-9e2c-6d6b0d558adf", "indicator--4afbc1db-4196-4163-abb5-3628dc0cf028", "indicator--bc4c3469-5145-410a-a129-09a0509b5871", "indicator--d6ed9a05-0c85-4e6e-aead-4a72d9e2bf43", "indicator--f3e9709f-1b73-41a9-a23a-dfdd1cb478dc", "indicator--5856c386-9125-4efd-9592-55fc0dcae44b", "indicator--d28b876d-d21b-483b-905c-5ff423b4b5f5", "indicator--9d4b4e61-5284-4f0d-841b-ee52de597aa6", "indicator--6159a7c4-ca52-4cd5-962e-c4eea362e8e1", "indicator--ec5f9184-0009-4f68-8881-9e189cf18277", "indicator--7cae4c4a-d810-40f6-8f4b-5fe5c52c7ace", "indicator--662c645f-ae56-4c08-a627-a8d25c491abf", "indicator--9d914c48-f72f-4480-ae4a-0b23cb762b87", "indicator--8638d8a3-7c56-44fd-a05e-dae22f62cbb4", "indicator--22449886-9119-4e83-bda5-90bf0b848d40", "indicator--1f8e1bd8-b1ae-440e-ac71-90ddc389cc18", "indicator--ce5840b0-0a9a-4a53-afad-5cc9c149fb97", "indicator--52fedb7c-1223-42e1-b3b7-364c4c5aa0e4", "indicator--3e457124-f2f9-47e4-b9a7-1789932dcf28", "indicator--fa3ff04b-f9b1-416c-9338-0a23ba08e237", "indicator--714cf18f-6ca1-48fb-818f-de076424291e", "indicator--ac8aa5bd-839d-4475-8e78-47d13a89ade5", "indicator--6bbbf7f7-99bd-49a6-b360-c08ff98f2182", "indicator--b8f2b3e7-2034-4eb3-bfe9-8cb018a794c9", "indicator--d7b562ec-e77e-4727-9fca-981d1999f608", "indicator--787d9089-7cd1-4363-b051-fd66453cce3d", "indicator--4188ce18-8f38-45de-bb57-7e7e4c7a12e3", "indicator--1e8e1043-40ad-4851-94de-848d23642a55", "indicator--f89067d4-82cd-4a07-ac9e-95833d8dc027", "indicator--e8fde94b-1511-4c51-9435-113cc53ad1cb", "indicator--6d61a3ad-c502-4540-84b8-6db56db1fb94", "indicator--ba6f56d3-9b75-4014-8817-005a34036bb9", "indicator--3a6a9926-a368-466d-b95e-bd56186c9934", "indicator--1a115489-ab07-4f5a-ab05-9de0dd96828e", "indicator--270810c3-6bff-499b-aacf-bdcf71baed04", "indicator--51e77c21-3436-4752-9183-d2d5a6a18eeb", "indicator--d68a90b3-971c-496a-af6b-6be3183f1e58", "indicator--4e8e16ad-1262-4dda-bcc9-2103fa6b5573", "indicator--bb36cd88-4b88-4081-96b6-55a9d3550d31", "indicator--8e924e1f-6ff9-476b-a2f7-139ad430160d", "indicator--9a55e56b-d74b-4418-8a93-d60092edc34f", "indicator--672ba8e2-a801-4a35-9c4d-1124f8dda9c8", "indicator--eb43cc23-3fb7-4332-b850-4aff6bff401d", "indicator--aeae0b21-0088-459d-9719-bd315f973f35", "indicator--cab1e73c-c567-41eb-a54b-11d8a306dc3b", "indicator--04b844c4-ce40-444f-93c8-1056c0a5307a", "indicator--19ecb3c5-7f01-42d0-a9c6-346d71ca395b", "indicator--fbee3c61-f0cd-45aa-81d8-6cd6755973c3", "indicator--70c4b00c-6e48-44a3-bc07-d798dfceb943", "indicator--bb072d63-512c-4002-acc0-f4d925a513ed", "indicator--7c4dd0c5-f834-42eb-b994-9387b96f1e61", "indicator--10a3f76b-0584-4fbc-a162-59a0879a293a", "indicator--6b92769e-1571-4efa-8ddc-4cbc555f599e", "indicator--9ac23380-e6e6-4d1c-84e9-f7bb831414e5", "indicator--90535118-6f64-419d-b36f-92fc60b74cd0", "indicator--dc779daf-0c9b-482b-b6e6-7f4517a7602b", "indicator--cbd9c4b7-89b8-45e9-9160-0c26b50d03f5", "indicator--841f9029-546a-48eb-b209-9646e17cc289", "indicator--1fbb7a4f-2a05-4867-b963-a6f51e9842de", "indicator--35a3917c-f358-4c4d-a331-42b204a125f5", "indicator--a2bf7a91-47d9-4ff1-b529-d4c91cd6c784", "indicator--0a57f905-291d-4ca0-90ec-9e68ef32a082", "indicator--53d62c75-83f7-49ec-90c3-703b548cbf17", "indicator--ecab6269-71f0-4013-aa0e-d5a859025ec0", "indicator--e80bdd91-d349-41f2-8f1b-9eb3898a3611", "indicator--7f7c667b-21b3-43d6-983f-8064867d2381", "indicator--1be072ec-256d-4b26-a4aa-4aec22d4d707", "indicator--dde5943b-1ab0-4235-8bd3-c44b9e7af285", "indicator--ee04516a-49ce-48f8-b5bc-13c83887f961", "indicator--4de6f809-9f0c-4f46-88de-3d907cfbee8f", "indicator--504b67a8-b1bc-4e0d-83d0-4306a16b7503", "indicator--bb0e8b79-a72d-48d7-8d5d-dfbd8cbaab01", "indicator--1e79b3ba-c43f-4a84-80d2-381d7dd63955", "indicator--0823cd50-b6d2-4d61-8295-2f7ddaceb669", "indicator--099e33a1-bf40-4726-b6e5-483f00bd58d0", "indicator--ca45cf0a-0a29-410b-8692-8546f4e9d738", "indicator--a3954e02-d32f-4b03-938d-2f51a3f6be74", "indicator--057c53e4-8a4c-46dd-aef7-1e9ff7a85782", "indicator--e50f4510-a1a0-47de-b38c-f3f67ab5a465", "indicator--e5dc7cca-f03b-4a9f-939a-052e65c058c4", "indicator--f10f9e7e-91b7-4210-b041-b22892e60ed9", "indicator--99fcc3f4-e829-4d8b-a931-4e29f5547572", "indicator--eada0275-8eb9-4090-bd9c-eccff57cce57", "indicator--8d16d846-7e44-4dcc-b6bd-c0054fd69e93", "indicator--05a8cf1b-0de4-425c-816f-f822bdabaadb", "indicator--4a6b74e0-0556-4678-957a-fa8bf8168f96", "indicator--3355f677-4be9-48a3-84e8-9a736c3f8be6", "indicator--365a6e9a-e3bb-4f45-8663-d76b76f9b8cb", "indicator--15aae1a0-012c-4451-b6f9-4385695c8b89", "indicator--2eab92e6-7a5a-4357-af7e-38299914dfdf", "indicator--6b662340-b205-46c6-926c-15f2e2a8ce46", "indicator--b2ff0fd0-a76e-4971-8ddb-d0dd323501ac", "indicator--c45f435f-e68b-48f8-b9c0-21831450487b", "indicator--03d1e8f3-74b4-4430-b6f4-345e9fa9d579", "indicator--0ad28fae-6f56-4b75-a1c4-3f4c4203106b", "indicator--0aab4ded-064e-4849-a598-b7b045083887", "indicator--514c7023-fd4e-44d5-b60e-949b6cba35c3", "indicator--f21eb16a-1102-4590-867b-8496d63fe7b8", "indicator--d1514dbf-aef8-4365-9dd0-d432081a6446", "indicator--bab74f24-3e4b-48e7-8b34-e981c9dc7456", "indicator--49ea9943-cf5e-4641-829a-a87c9c57311c", "indicator--69652c5f-bada-4f68-a0e3-2584866aa894", "indicator--8e450a6f-739a-4c7b-9891-ec976d6a53fb", "indicator--a0ec7c0c-39da-4171-b841-383d9b956926", "indicator--e70285ea-f7bf-46e9-af57-41ea390a279a", "indicator--77efdf92-3e41-499a-a9e4-7eaa0be72c1f", "indicator--7bb20840-89a2-4bfe-ab34-479ac9df2f77", "indicator--29e1949e-72d9-4093-a292-4cba1f977c6d", "indicator--59f8dc84-6cad-452e-93c5-ffb656f5e18b", "indicator--6d295623-7a6f-4d9d-a81f-da97a5952d3c", "indicator--9d5eea51-167e-473d-813c-6d2d890bc95a", "indicator--81d41153-6d26-42e7-ae5e-1ff92dffcd8c", "indicator--d5074dac-0300-4d1d-b006-659465836bc1", "indicator--a4c330ce-8de6-44cf-a4d5-cf5fa4cacae7", "indicator--f62bbc1e-0a21-48b6-abfe-f5789f6f987c", "indicator--a71b47bb-5578-4d13-93d2-42a01b8e6b5a", "indicator--0d042693-c275-4afa-b3c3-d8e634f0f298", "indicator--596f2502-899c-4593-9ada-5916ad365c4c", "indicator--8dcfe6ed-fbc7-42d3-acce-f3a94cd73a9b", "indicator--943b0aad-f8fb-4c2f-9ce9-632f44f9c1f3", "indicator--cb6aa4f2-c750-40ab-a58c-bb2acebcb22a", "indicator--2ab262b5-bf13-4e70-b822-9403068e5e78", "indicator--1bd921fc-76dd-400c-ac4c-18daf870d25f", "indicator--4a18518a-9abc-49f0-9236-874d6ad94063", "indicator--f294d972-4512-410d-b66a-a7e1e313aed3", "indicator--a0bb2c92-065f-4323-ae27-5c92c5deff73", "indicator--46bc40ef-4a6b-4c51-a695-90d259a7ff61", "indicator--590522db-d8cd-44cd-bead-463f36ac9f00", "indicator--3c1e8bbb-f082-4ca1-8f3b-b51c11588686", "indicator--1ea228d0-147c-416d-947b-905f3328ee7d", "indicator--42cef19c-0f1e-4a0a-8678-5b5acb3d6288", "indicator--ee81eff9-900a-4d0d-b1c9-2303f4a75189", "indicator--88df4b14-b2a7-46ac-a1af-6e7f6c428745", "indicator--f3d64e56-3f6d-4ccd-87df-15ec395b08e7", "indicator--a5b260ef-43ad-4b44-867d-977cf0875012", "indicator--4723b7f3-b901-480f-ae10-2657361922d0", "indicator--b6cbd87c-2bcd-4a84-bbb6-1bc9bc9b68d3", "indicator--85727e29-57fe-4b62-b07e-78fda56809c0", "indicator--aa62781c-386d-4c78-a8b1-31fd9450db27", "indicator--cb311b18-bb5b-4ba3-97ad-7ad10ee3bb56", "indicator--8cf548f8-95aa-4740-a836-f6c90eb946bf", "indicator--5b3d89f8-7a1b-49a6-9228-dd458b89464c", "indicator--70b63282-e051-4009-ab96-eb5ce8d041e6", "indicator--fa7b4e5b-091b-4d0a-8800-79d07972c3eb", "indicator--42839d1e-8686-481a-a327-2ecf1357a128", "indicator--1556ee78-e778-4910-9187-e43074581bb7", "indicator--63a3009b-7716-4014-8ef6-82147d45462e", "indicator--a9615743-062c-4ee0-bd1b-97c4ee1d6748", "indicator--6ecc2d0b-adc4-46e2-a5a3-6dc6fbb8d2dd", "indicator--605f5b90-11fe-454b-b9f1-de0e7bbfcdd1", "indicator--d78c70c1-c479-4c0a-9908-fa00911616db", "indicator--d2923dd2-bc01-4b22-81bb-d966826c0c13", "indicator--61902f9e-e8c1-4872-97fd-86af15b932ae", "indicator--82146e47-b0ca-467d-90f0-a03804fa1331", "indicator--4287fcc8-2d83-440d-8b0b-4c4b30f1f843", "indicator--eeee8070-5d1a-46fb-85bf-237d9bf4c09f", "indicator--600d4036-52a7-4b27-88e8-810fcab108fa", "indicator--8fef4f0d-c3e6-4c08-9654-e6061f38f2e6", "indicator--152e7073-f6fd-401f-ac6b-2efb052e805a", "indicator--9f125161-e720-44e8-93e7-75bd4ebe0c66", "indicator--d09bb02c-1111-40d6-be81-b32109056fed", "indicator--9081bcbe-a731-4fef-a2c4-83217d9623fa", "indicator--4f0d75d7-083d-4dcb-bea9-22a15f62a06b", "indicator--7a2abba8-c725-4087-a1da-2809d6e7420d", "indicator--ed64edce-ffdb-4c33-a34a-7d8533af57b9", "indicator--fd713c7b-3589-47fc-a8d0-88d4f68d4388", "indicator--27b17e9c-b254-49f7-a080-861fe8b8345b", "indicator--e73d7942-61b7-4d98-a477-dd39b29b9eb0", "indicator--7e361b29-9c05-49a8-a8e9-2359710671aa", "indicator--04b3047a-89a6-4c92-aab7-6a267112f807", "indicator--55c89198-a116-4def-bcea-fc6930cbac7e", "indicator--60bbbcf7-cd49-4d65-9446-7d9b1bac439b", "indicator--f86724f4-c741-48b5-8a7e-241be37966ab", "indicator--d0eb186c-053f-4429-a103-682a83dd8e9a", "indicator--57bfe122-6ee7-4079-b24f-65fda02670bd", "indicator--59a4d103-dfe4-4e62-a6c9-bd1c1dff2df9", "indicator--fcce5cd1-0ce7-497c-8a44-dabc800ded87", "indicator--1db578f1-7cdc-42a1-97e5-832e486f11f2", "indicator--700c2b38-2007-4b19-b5cf-acb406e36cd6", "indicator--241b5259-f936-4ee7-aa81-5b3413b22745", "indicator--ef1c2fdd-fda9-43f7-8cf5-94d7953f5eab", "indicator--614e979c-0c0a-4005-aef0-9bfc2c788a6c", "indicator--b0a2a065-2a09-4f4b-8b4e-ed02c76e1cb1", "indicator--5c4d7dee-6a0c-4f14-8217-22f6b8516d5e", "indicator--9d4735a5-07cf-4e00-b42b-5d4282fd0452", "indicator--7bfa25c8-286e-49a8-bc6d-9d303cba7e48", "indicator--e0c0d7d9-6eab-4420-b5c6-acc51785f8b3", "indicator--f9d65972-3048-4e15-b97e-f7d350b8c974", "indicator--b5bddc92-ad84-442b-9119-841c95be6a24", "indicator--0fb88bb5-5246-43e7-be9d-922f2949b720", "indicator--bb0cba57-a428-4111-8381-dbbbb7519fed", "indicator--26ecee84-9a2f-41d6-9ae3-97cf29efb340", "indicator--87ab8710-5b19-4fdd-8c23-b6d6498efe6f", "indicator--6662d467-1cc9-48bf-850f-b08dd83f788a", "indicator--0138dd51-4454-4596-b0d3-501832cdc84c", "indicator--32afb076-140b-4b66-afd7-decfe2b9b19d", "indicator--ce5e29c2-41b5-4442-bd69-70e1593137ad", "indicator--8e2b196f-93a1-4799-97a6-e2ea9e0b16fd", "indicator--4050998e-88ac-4588-ac7d-1cf019894f4e", "indicator--f1118e2a-87c4-4044-b696-484af369fc66", "indicator--9b3d596c-a075-435b-8c30-b27c511b475a", "indicator--6a833534-4835-41b8-91c9-a523dd4c4aaa", "indicator--8e79b98d-39b7-49a4-a7d2-d4fe226dae55", "indicator--8d1fd1e1-4abe-48a0-92fa-5f894afeb232", "indicator--e4dbdf3c-04b0-4205-b1d8-bb8e79e28f15", "indicator--03f42f0c-e20b-4fa9-8e80-92b6d734a1f9", "indicator--67406c17-b4f2-4eec-b532-c5d27b860377", "indicator--e4817732-ba32-4f35-a335-1db22e09f7ea", "indicator--16a37aec-dfc8-4c9d-bbbb-870ede46342b", "indicator--42fcafc3-69e0-41c2-b501-dadf59ebf87f", "indicator--50024220-5115-4e31-99c4-9ec3e5430586", "indicator--9f896d44-1a87-4c00-b3cd-29c82074cce6", "indicator--b6533b22-0751-4db2-89f4-5201b3bcc80d", "indicator--6ad08615-5af6-4524-a691-936f6b6b6bef", "indicator--11727ac9-0309-46eb-8386-267633de8ad2", "indicator--bb4a7a9a-22df-4a44-914d-920db5e62ad2", "indicator--21fc09d8-2b54-410e-b16c-b6c414341af8", "indicator--814430ba-fd46-4a76-8782-2e1f12da3cf2", "indicator--402ffc91-ac7f-492c-aeac-a6a2284cc307", "indicator--f118b95b-e42c-4013-91af-4f4423e6bf2d", "indicator--040f3ffa-ec1b-4168-a2a6-098e160d01a8", "indicator--2352156d-81d7-481a-877a-354aa043014b", "indicator--ccc47577-0b37-46d3-881e-7e54689cfca0", "indicator--e39ec93a-928f-4f32-91e2-12b7ccdb8525", "indicator--e01fe777-3350-42e1-98e2-946eacd57f08", "indicator--cefffe7b-4866-46cd-ac69-bfceb38b81d7", "indicator--7705462d-6543-4c19-a02c-ba2e5ad867a7", "indicator--d43aa22f-bda0-4160-84f2-9c031e06dab4", "indicator--cf85b29b-d3cc-4a99-b590-dddf96220cc0", "indicator--d77cf926-79af-4ef3-9544-22a711388ec4", "indicator--ac572142-5b77-4da1-bffd-786a699d1689", "indicator--1f605477-856b-4573-8b0e-987224a7a34c", "indicator--98683706-bcbb-4d72-8a52-b034cbad30d4", "indicator--29b1114c-ac50-432c-bc81-04fbd01761d7", "indicator--957dfc5a-fd1f-493d-8f47-f48bd9e1bd47", "indicator--860dbcfa-d830-4176-aa5b-da31db54423f", "indicator--126b9608-be2c-4749-a2ab-39dbab7d98e6", "indicator--7d0535c2-5646-47e0-bbf7-6d7898e3474c", "indicator--aff10cef-a420-443f-8fac-e3e8a9e88a50", "indicator--c008e78f-ef37-4c48-9f0a-c2ccf0f70cc3", "indicator--8e8d6a12-5e67-4f81-b3b0-48ba255102c2", "indicator--aff7d2d7-d0d3-4a22-8103-b7f9b86ac5fe", "indicator--e48a4c84-e6c1-4b0d-9c00-b7216dc8c9b8", "indicator--27059b25-0807-447f-b3ac-a89a5c7335e3", "indicator--fbe5a33f-ad8b-489a-84bc-1f68e2daac69", "indicator--6f9a39f7-7361-442d-bd70-7143eb0d4c80", "indicator--22be9fd7-bdaf-404e-978e-2d4ff710aa90", "indicator--2001d030-068c-4580-8704-30e1ee9a1bfd", "indicator--d66d37df-db04-466d-8c9c-b0aaf71286ce", "indicator--5d8b861e-25c5-4c7e-96e6-27ba637a282b", "indicator--38cd432b-ab42-48cb-86b3-aa3364b1c282", "indicator--9a9ef49b-428f-41f8-b6aa-d1a8d5972602", "indicator--eb055b84-7d19-4729-99b2-ddb4f81657f5", "indicator--e9fe1a31-a1cb-48d9-b651-f82e8df4106e", "indicator--44ea70fe-3bfd-428d-86f7-768198c9cd16", "indicator--6110103c-c3bf-421b-82c6-d9f54d704cea", "indicator--38eff30d-9ff6-43e9-8bb7-b6cff5fbcc27", "indicator--8e0745b1-0573-4c2d-829b-c08902b55664", "indicator--e2d322d6-ca4e-439e-8c23-8b41288f1b0c", "indicator--8bc44eae-5fa2-4ba7-b17d-9619c12cdac9", "indicator--cbc6a018-ab32-480f-9d03-4a7880adf0e6", "indicator--1ca9284d-57a8-4072-8a9c-54b1e709e288", "indicator--405ad29f-a4c1-4898-a4ca-ab1602825151", "indicator--42218267-a50c-4388-96f3-a8be4d10bd5d", "indicator--80ecaf29-2640-47d8-b95a-d0afe289351b", "indicator--a6e588e4-d695-4017-944b-71b9da63b827", "indicator--5cc674df-6303-4d04-a463-ab6b15397568", "indicator--1c0f6196-dc3b-4df1-85fd-8d1c7fd00268", "indicator--c6b7a2a2-26f3-4d58-a7b3-fa6d772669de", "indicator--e31e852c-ebce-437e-8280-8a4b13e4f6c6", "indicator--bbc5aa62-a5d5-462d-ab3f-4bf4fb44dc9e", "indicator--a77c4e95-8ada-43e3-9c7a-23fbfb170c52", "indicator--b2825f42-29fd-466d-be86-a9b005c4b341", "indicator--45e79723-ee8a-44e9-bd5d-5f4f0704d7da", "indicator--e715c819-625c-4ed8-bb40-85df9ad7ab73", "indicator--18229aa4-e9e2-4506-82b0-09d440aa4fdc", "indicator--6e6036fe-8eba-4092-b4db-ae93a49e3c25", "indicator--9f5483c2-1877-40b0-ba3e-5789b6d49c13", "indicator--b49bfd19-d9a4-40bd-9b12-f7138fa1fbfd", "indicator--d3c21e81-9b8e-4ecd-9c51-ceea7ce88496", "indicator--9b232761-4ee3-47fe-947b-50201a640f81", "indicator--730e55e6-3a58-4b8c-9959-9fc12209c600", "indicator--67331e34-9229-404f-b611-92fc4997f3d0", "indicator--c1bf8c7e-b777-4bc4-8731-b5c043924be0", "indicator--9c529c04-61f1-4995-a878-c9c3ff47529c", "indicator--d6cca970-83c2-4cd8-90cb-9128f049ba8e", "indicator--c74cd57a-f1fa-4304-84b8-f47240e12c1c", "indicator--a2347034-c93f-46fd-baef-e6e659d6b1c9", "indicator--412cd9db-2ff7-49bd-9964-fbb61d54702c", "indicator--606a379b-3181-4deb-b6f4-9e2bcd0120ac", "indicator--d7459d6c-d57c-4cdf-8d46-e612355cda9d", "indicator--5525d7bd-fff0-467f-a332-314d954ddaad", "indicator--1302f362-4c8f-4c81-8805-3d0d9f0c625a", "indicator--c66393f0-536d-4166-b50d-0e3befc20567", "indicator--fcd700e7-e886-4dbe-b800-39c5ff55a67e", "indicator--5e52dc50-9737-47c2-91da-078619917a02", "indicator--7800fa6d-68d7-460b-b71c-58f43922b470", "indicator--0b9e7676-92d3-4025-8ade-dcd9b9115312", "indicator--4c5e96fc-5ee2-4d46-99a8-32e8435c079e", "indicator--378bf1a7-2ea3-45be-b845-c97a0c307e7e", "indicator--3c854b06-7585-449f-93e4-c2f597b1b8a1", "indicator--d7191e7c-9461-4499-98cc-b8ef066a019f", "indicator--dde81b2f-2d9c-479c-883e-557c82ef08b5", "indicator--4a69025f-3177-4421-8d7b-96821d12ab77", "indicator--245cb1d1-bdfa-4118-adb3-e828f5275e98", "indicator--f61eb10a-70b4-421f-8f6b-7753d630f22d", "indicator--29aa4b55-1fab-4230-94f6-3ec957471318", "indicator--7fd638ef-cc81-4d97-ab04-0a5ec0b1b725", "indicator--082b487c-c060-482e-8d03-af57c789c20c", "indicator--c15f44cf-f515-45f3-92f0-602a01b26eed", "indicator--451e4dd0-7646-4364-ab59-3eb6094f5814", "indicator--c4a368e9-8a45-4813-a0bb-922b68db09e9", "indicator--66e63844-671f-4da6-8279-07e3db10d70e", "indicator--204cc947-e3ce-4819-b29a-b254bf287a2a", "indicator--16ec4f92-4a2c-4aa2-8118-fcbdf9bd66c7", "indicator--8af22049-7afb-4b71-972d-8fa8a268a94a", "indicator--43eec03b-70e0-423e-93f4-4ee6dd11db30", "indicator--348ab836-2766-4203-8cec-c0ff543c11f1", "indicator--42a7c6e0-9f93-4711-a636-77a9b8eca285", "indicator--e2e044a0-3368-4fdf-ac65-175e0795c0e1", "indicator--ef633f93-5ced-4b96-9393-d7589e5ffd47", "indicator--eacfb623-9b9e-412b-b609-6af609355d98", "indicator--a1c36ff6-035b-477f-b3e2-e285b0adc62e", "indicator--c5c2f0b0-deea-462e-a1dd-14af8e93939c", "indicator--84747c7c-a1f7-4c9a-8575-80ee6500ee9e", "indicator--280a6076-da20-4b58-8970-3e8f201b6082", "indicator--c0731870-07af-414d-a9bf-115538c8c40b", "indicator--e0d26453-2191-46e9-9afc-fb7b440968cc", "indicator--b46d7613-d045-40ed-be05-0095fbb690e8", "indicator--2001de18-bacc-4ebb-8b48-11e6d076482e", "indicator--2bc6f800-6ce4-49d5-bb53-14f9aff253b1", "indicator--391ae02f-1b24-469f-821b-90a411030a9e", "indicator--8f5f3664-ed22-42b0-87ac-41a10a1d7c15", "indicator--9904d31d-1034-4e7b-a12f-d5d466589d7e", "indicator--32069e27-5c4c-4b27-ad85-b7d45f10835b", "indicator--d2f4e434-2204-4832-8e6b-6fd4b2dfe77e", "indicator--c910c59f-b8b7-469a-b5c5-87eff822d87c", "indicator--39dde394-a330-4720-9d56-96cc1587a938", "indicator--07e22c9a-5904-48e7-a28d-5fe00328ed8e", "indicator--1f96771b-cbfa-4913-bc95-6c0bd9bc9b0f", "indicator--71577f86-4e27-4172-8e0c-2ed4a4fbf810", "indicator--9af899aa-9794-4ce0-94f0-8eb3533e18c1", "indicator--6097cdf5-18a0-494b-973b-f8f221631334", "indicator--32533ba6-902f-4d95-a8a5-44be01136611", "indicator--a346b920-604a-4352-9c9b-49f8ff0714e2", "indicator--a38b205f-e842-41a0-83ba-86ba98951824", "indicator--6073ffc5-c4e9-45a9-9375-43dd60179e47", "indicator--835c8e4d-dbb0-4e98-91da-1f87ae29884b", "indicator--1dbceba8-e6fd-4c89-9676-52724e9d413c", "indicator--8eaf6df2-bb6b-4fc5-96a3-09d2bb9be247", "indicator--34700bbc-a869-4052-842e-aff89220a794", "indicator--1965144b-c200-488c-90f9-635f399bdb66", "indicator--0d81dc55-dddc-461e-947c-84377831a120", "indicator--3afdba03-d501-4b9d-905b-baa76542dd94", "indicator--90b5fc64-4597-436d-a740-04b05caed724", "indicator--ac4a8d01-9d8e-42bc-acf2-940b54b1d3a5", "indicator--b44fff20-09aa-4fd6-a81e-dbfe265dbb28", "indicator--db16c4a4-c347-4d23-a46e-61f0ca717d63", "indicator--ba48abde-3737-4f51-8916-ef5c548cf778", "indicator--102e72dd-2093-4c4a-bff4-c3fee45b5a16", "indicator--1af5880b-7ab9-4610-b59e-f4469d29eee8", "indicator--dc5a78fd-e482-4c85-84c2-fdfff4f0354b", "indicator--f0b5d41a-d579-4e98-a4e4-139a80aef225", "indicator--5f083237-d630-4e87-8194-6c469be8df38", "indicator--d6aa26ef-dc7d-4896-94aa-441188bd2169", "indicator--f0c6978d-c1ce-4719-aeae-7b667d436d16", "indicator--8e4fdf8f-c1cd-45a1-9d29-e0ae38dc4da5", "indicator--9788e922-8e3c-4c2d-84ec-842ab8be961a", "indicator--d571616a-42c9-4c1c-bb85-fa7b72bd723d", "indicator--7edb6c6f-39d4-4d68-b9c0-5306ab049f3b", "indicator--1ac7cb66-0fca-44b5-a609-87bbe7872392", "indicator--b989c798-fe34-437f-84c6-a5e0ff448b6c", "indicator--eaf8688c-84d4-4a30-b7ca-1306e806f92f", "indicator--7bdb5ab0-2825-4e47-bfce-b52fbc35c1ac", "indicator--324beea7-be7e-4317-a6ea-bc52786afb2c", "indicator--07c506f0-8b5e-4052-ad5a-7e5591e0caa3", "indicator--944ad847-5ada-42c7-9ccb-d4786d604c1c", "indicator--fb8bbd34-f7cf-4cfb-88fb-c5a5d15341db", "indicator--aea76ee2-16f1-47b2-9267-f8287b2354db", "indicator--f9025112-c8b3-439a-a661-2224a8c57577", "indicator--a88b9e38-0bf8-498d-82a0-3b662b591741", "indicator--8e8a133c-1783-42b3-b50e-673e9a2879ba", "indicator--8549dba4-a7e3-4153-816e-e4c0110057cb", "indicator--746621dc-8441-40aa-a5f5-86ab95bfafc3", "indicator--a0809ad7-073b-407f-b48b-9910054fe009", "indicator--cad4e8b9-bb88-458e-9864-fd73ea90ee39", "indicator--898c52ba-568c-4416-925d-088099f92dee", "indicator--70118dc7-4ab0-4271-b540-dee8da9f492d", "indicator--b0aa2cc5-5ade-4fb6-8964-22d9caa4b631", "indicator--c7c78942-2178-47dd-946f-d9f305308ad2", "indicator--a8476c2e-616a-4bdd-9c02-ec284da07ec7", "indicator--ef1b0759-1437-48f0-adf9-bf8946fc5cca", "indicator--19b5a190-dedb-409a-8e99-07ec83eea195", "indicator--80d1580b-e777-494d-978a-75df03565b9b", "indicator--132cc56e-1aa2-450e-af59-35355c96448e", "indicator--1fa8a66a-ec95-4397-a3fc-c65c34e543b7", "indicator--45844250-f13d-43fa-b52b-d8cf15151f7c", "indicator--2d9e32f1-a2e7-49d6-92da-24eec02489df", "indicator--c2e4e647-df97-4f61-a5c0-43f593eb675e", "indicator--40b0813a-d3d7-4bd3-b81b-e66f5c9eaa05", "indicator--cee86991-8bb8-4833-85da-229e5e253655", "indicator--ee4e0d2f-0cb0-4c12-9666-75af0bdb479f", "indicator--f7957782-86b5-4f0e-a079-6c3a2e82d1d6", "indicator--474cf0f8-2116-4f62-9a78-a58c609fcc1c", "indicator--a959d9df-370e-4e49-aca0-14e286a15cc7", "indicator--b9e3f32f-cab1-4265-9e01-6a625a6eb637", "indicator--ee36513c-28ea-436f-b99e-c710e6c17cc0", "indicator--a26a7421-bd48-4761-a91f-911cef44b512", "indicator--a643d849-02e5-4066-89dd-b6a26d5d95e2", "indicator--5fff0b7b-524c-45fd-938c-8c90a5cede15", "indicator--ed3d993b-b83c-41a2-95cf-f493e786664e", "indicator--4347f7c6-8c58-4902-88de-6b529021b7cc", "indicator--f7a7433d-ab6a-4ff4-aedf-ca1ef9fec664", "indicator--0134feed-32bc-40fd-8869-72607b00099b", "indicator--e0564f31-9bc4-4b2c-85ca-db47a8a3f5b7", "indicator--87d3ca66-d056-49e9-9b50-3e24cbcb798a", "indicator--31af03d5-8534-4153-8701-1420c82d0318", "indicator--a7199cc2-ec77-4ab4-8c3c-5272a8a4c254", "indicator--056296a7-c99b-4aa9-bc1b-3effc3c9cbce", "indicator--79980f49-3b61-4043-9e98-6ac0c14932d9", "indicator--46f66fc7-5179-4b9f-b470-323e9c496ebf", "indicator--bb09043c-cc19-4e1c-a473-7ceb4e8810e2", "indicator--8b4f8448-ac0c-4669-a77c-6571e42456e8", "indicator--7b4c01bd-6ca4-488d-8614-3d26736be471", "indicator--c38068f0-3831-4c75-a2b9-65b3107d3b53", "indicator--ff8ece09-32bf-447c-98b6-d1eaa6613b7b", "indicator--9b25ac27-4d94-4d92-b52f-ad21afa7e50e", "indicator--149e9269-afc2-4404-afc7-e95ba9825afa", "indicator--d222dc18-562f-4aad-8052-e906bbb4c4ab", "indicator--8cdbde5f-a681-485c-8c35-96ce15e7dab9", "relationship--225fa7c4-7441-4efc-8158-36bf0fb5a7ab", "relationship--9cfdc2ad-8687-4447-908e-fd13d90b4b7f", "indicator--4d86a3d6-e504-4f0f-b533-4ed11d30511b", "indicator--db949138-8dd7-49cc-bb70-f21711a1f2ab", "indicator--00e1de3c-deac-44e5-a054-0c52aebce05f", "indicator--26f5cec1-7718-4f45-9db7-f64a99367cac", "indicator--3ff394de-9c76-45ac-8827-9627b010101b", "indicator--e58ab89a-236c-4f12-9064-b498ffe6ed04", "indicator--a57b78cc-da07-4c1a-b678-1746c43fee2c", "indicator--3029aebc-0949-4114-b639-23def8fa1083", "indicator--e056c613-4000-4c40-b34d-9ae5ffa134ec", "indicator--1be07791-5fb5-4e41-abc9-83d45258f50a", "indicator--e4825f10-3eea-40b6-abd6-8a65746f0747", "indicator--dbbdc3e4-bdfc-4534-9cc7-f0958a250856", "indicator--cc7388f1-3839-4fd2-bb02-cfea131c91d1", "indicator--39a9f6d8-14db-4826-a594-b2d2718e2083", "indicator--d104e3bd-a4a9-474f-9677-683ef7cece1e", "indicator--5ed2e7b8-142c-444e-9dc7-b7814136600d", "indicator--ba4734d0-c73f-482d-af3d-09730823eb48", "indicator--5c1097ec-a8f2-47c0-a4b9-6d10a868f2eb", "indicator--0994b21a-1092-46b6-9b69-a857999642e8", "indicator--84f62f30-3f4c-482e-b132-eedbfdbadb21", "indicator--40f485b8-0a7d-4737-a3f3-09d31154e9dc", "indicator--a50195bd-5bf8-4082-90cb-974417e116b2", "indicator--0ed51382-e161-4df4-9c3a-fefb6d11e60a", "indicator--13e7bf7c-4a13-4458-ba4c-556160fa7255", "indicator--ee5fb0ca-8af1-4556-b1d6-7012b757090b", "indicator--71a54de5-53c0-4200-bceb-3022d5d6ba6f", "indicator--aab4ebcd-9446-41c7-a009-8c8ade91cb67", "indicator--42adef61-0327-4517-88e3-ff6de17757dd", "sighting--65d15fd4-6571-4fa1-ac22-d13517da90ea", "sighting--964783a6-cafb-4598-993b-63b1a02610e5", "sighting--ca876297-6f32-4cd2-8bbb-7e977d7119a0", "sighting--3bccdfd8-afa9-47d3-85d3-56bdc405b2ae", "sighting--28797d99-e961-401f-9ee3-d50b9356b435", "sighting--e6c5293d-b3e2-44ab-8fff-63879013a0dc", "sighting--64e82732-b4fa-4b03-8c19-9d20a5e30259", "sighting--13f96404-9f36-491d-94be-7495081c01ed", "sighting--9c64f9c4-0fb9-43f7-b415-bcf03422c974", "sighting--041fbcd3-330a-4842-ae90-e14515940e81", "sighting--20d4bbda-7914-4afb-9710-b9180dc5ca26", "sighting--c70a18dd-6563-449a-ab9e-c6e70fae2dc6", "sighting--2d9cd937-5ea5-4ef0-8598-b3531d78c883", "sighting--fabee603-c54a-49b5-b081-11aeed8acc88", "sighting--4a07dfbd-335f-4b03-8e94-5acec3369155", "sighting--e16f4167-87dd-477c-b816-66daadda57fb", "sighting--a691aca1-fc95-4c1c-919d-4df99a3b900f", "sighting--e3ad7662-6f87-4bbb-b192-ee6b049a8da8", "sighting--b716ff9c-7a43-4642-9536-0c421f063d99", "sighting--2cf52640-c2a3-4c4e-a8fc-29752fbe0f18", "sighting--836fd848-a108-4c87-bfe3-1558a707f4b8", "sighting--677c78f4-cf69-4793-8187-648f0d70fc44", "sighting--10461b05-fc04-4d1c-ae50-b112d583c74a", "sighting--cc469abc-2993-4fd4-80e9-5c7a03da5fb7", "sighting--b0555296-a325-47c2-85fb-5fc5e5306740", "sighting--018467c1-99d5-4c5b-ae97-84bd16c6a8f3", "sighting--08c631d8-23e9-4012-aaeb-97327be32075", "sighting--bce8c9ba-7101-444e-813b-ea79bd8d7d9e", "sighting--4f1e927f-ea86-4ecf-ad5e-0ff753a2fc62", "sighting--2a19cef8-6b4e-4a42-b4dc-4bd4d9e48969", "sighting--c7af6548-b952-4f9b-97f0-1c25494e0aaf", "sighting--678caffe-38d1-45c8-bcc1-de80993ce271", "sighting--f589eb8a-f8bb-4fc1-8693-a8413cb850d3", "sighting--277447ad-7012-4b17-ae9c-8cabf72759b0", "sighting--d5702571-c660-42a1-8767-8a53ab8039a2", "sighting--6485f0b6-63d1-4ba1-9ecf-67528a51457d", "sighting--5b32ae72-80d2-4f11-8e2c-22810b720000", "sighting--7dedeb84-256c-4df2-8cd0-61b6fd396593", "sighting--e4689427-35d0-4151-8242-504508aadb03", "sighting--c1925f47-7cf7-44ce-8c54-41b6e527dea5", "sighting--ad2d2361-fa00-48db-a764-c67bd6ed7c42", "sighting--094c4602-5206-4508-81f3-fc5e3e0087e6", "sighting--a0f81a48-30cf-4480-bc27-8b8215d80ab2", "sighting--c8e575a7-4217-4af2-83c3-19ad25cba47f", "sighting--275c5ce9-3a3b-425a-8d7c-64e1ed35e836", "sighting--5d2a5cbe-44f5-4c3a-8b86-b2e61f79c7c8", "sighting--9ba7c36c-ef31-48d6-ab5f-e6af728dc6be", "sighting--6a605433-9fb2-4670-b5c1-93a8d7872b57", "sighting--3b4a081d-3d9c-4989-9dbd-1c6f1c41e9be", "sighting--8f92b8a2-12a2-473d-9542-2089c1853b28", "sighting--83d8b7e4-7830-42db-8eb0-ea39e624823f", "sighting--7f8fc0ad-3a3a-4673-a122-11f65285a16a", "sighting--15c16e2f-cdda-497b-b094-502f35c6ffda", "sighting--ad2770f7-3737-4086-b38a-88a5b4087778", "sighting--b9a22498-82c9-4dc3-aa78-a2839737b8b0", "sighting--9eade7c4-f42a-43f1-a9db-a9fcb3d348d3", "sighting--af0b496c-c439-446f-a72d-4a8db39327da", "sighting--253296ab-fe61-4826-9b8b-ef6afa05f3d6", "sighting--2f26351d-d8cd-466d-b6a2-7c4491f608f5", "sighting--0efbab7f-735d-441a-8f22-7d10cfc7ed98", "sighting--52bdd82d-c676-467a-8eff-30f4b9bd311e", "sighting--69fe212f-70a0-42fe-9b26-680c1e94e879", "sighting--2b82de29-c512-47a7-b21e-d440c7bad2e3", "sighting--d1315446-6ab9-445f-8d5b-703ca62b65d5", "sighting--16c98d0d-ea40-4488-9698-845b126b9c39", "sighting--313bef78-0ef3-41a7-a290-6bc0b42f82b9", "sighting--9fa3d69b-87a9-40e6-9ac2-1eee5bb25f20", "sighting--bb5a9e7c-7a01-4366-a939-18e7eca1b596", "sighting--70ab5dd6-9c63-42d4-8ad9-4678294ddb21", "sighting--831aa7e2-7a1c-4afa-b0dc-dd76c06ab7d2", "sighting--fd182990-c695-46df-80aa-238344a55541", "sighting--e588b66a-d460-4499-8c83-ccbbc8c40c57", "sighting--39b8685f-392e-44d3-a6d9-cfe7d4c73acc", "sighting--ecf7b7d9-91f2-42b5-bee1-416f3f59a4d0", "sighting--b70bd10a-957c-4b09-a3af-d09f50355e31", "sighting--5f6e52be-12b2-4d64-9380-dd5d2dc9dec7", "sighting--5d28cf43-ef62-4acd-9a7e-b0a3bfb940ce", "sighting--2d2ca86a-b4a8-4c83-a776-5c113ed98404", "sighting--84e4907f-24df-49fd-89eb-71e28c0eaff3", "sighting--a09610cc-d78e-41b4-b5c3-91d51bd26965", "sighting--3c74ee3a-10dc-411d-aacd-68e5264dd1dc", "sighting--e53d3ca2-c163-4da0-aa76-18522bea94e2", "sighting--b104c286-4e12-4338-82a1-e97315d81fa8", "sighting--75f01d71-cd2f-4148-822a-e048ca6ba611", "sighting--eddc5d88-46b0-47b9-94c7-e8de753c4c23", "sighting--0e855b08-0d89-4eea-9354-2a516ed94934", "sighting--30996d89-a88c-47aa-8f64-6cf0a503cfc5", "sighting--9b4a255c-f175-4992-a858-3b6b0192dc4f", "sighting--340e990e-3bc3-43b4-a0e8-5bbee2d34356", "sighting--ad2d33f4-a376-471a-a3d1-61ed13f4f565", "sighting--dac0ac90-823c-40d2-b50c-524411dc7f5e", "sighting--8b14a38f-ed39-4519-8e61-0b36f96816c1", "sighting--d13e3bdb-d8a1-4df4-9984-90798eb0cc18", "sighting--992cb992-6db0-46fc-a131-78e64f146436", "sighting--c305cfe4-409f-473c-88bb-5b78725df5ae", "sighting--d5a13291-9020-4b7b-a540-a3040338c349", "sighting--6b172dad-09f4-4ccd-ab04-f164632538b2", "sighting--36ac1d94-0f8d-49d2-9751-7dc7361d5379", "sighting--fcedcdec-fd33-4b24-bc01-73f11e56ea65", "sighting--2fd65132-2154-4d9f-984e-d2b88381e1b3", "sighting--d1b9556b-369a-4950-bf0d-661a3f59f3c6", "sighting--910138f3-216b-4e22-a55a-010772000528", "sighting--2e9b289e-ae82-4bc4-9a35-6223975da293", "sighting--bfe150e5-8ccb-482d-8b11-b22a366d144f", "sighting--d5d9e1e8-07d3-4b9b-b3e2-55d746821dce", "sighting--883359cd-e9f9-4cad-bd44-b4b30eca1718", "sighting--5f0be7cc-41f0-407c-a0b6-84c8b0bf6ed8", "sighting--06aeb1b6-aa92-4315-8f15-542f7399b4b3", "sighting--1dda8ebf-3209-43de-9866-d58872ed5070", "sighting--dfa16ba5-eed1-456b-8f40-367570b35c89", "sighting--afbd95b0-ab8b-4f98-9ecb-e016608425f4", "sighting--36fab60d-857d-4b69-b3ce-e91a9846eca8", "sighting--c055ab9f-2ffa-4531-a274-a5c2433c6a2f", "sighting--567a48f9-3ec1-4f50-b78a-21081848d6b0", "sighting--b9723e88-a381-45ac-8986-417afda6355a", "sighting--cebe900a-b982-4a30-9435-ae7c72fdc601", "sighting--9c156737-134a-4fa7-b5bc-483fc8b4de1f", "sighting--d40766e0-9b3f-4565-9f77-89fcec870486", "sighting--97d2fed5-f64e-4097-90f6-baf0ff5894f5", "sighting--668adae8-14a9-4218-ad4e-ed07a1e9c5c8", "sighting--99eddf73-447d-4b43-aa18-48bfb399b41a", "sighting--5412e710-8986-4fa6-8643-fff4fcebe90f", "sighting--6c3c74c1-f495-4bd1-a0b4-81993ef7eeb6", "sighting--91264423-c376-422c-8a5f-df897530f200", "sighting--a60a2c0c-293d-471b-a594-dc25f4502511", "sighting--340d5712-ece2-4b2b-ba7a-c7d9d317bf9e", "sighting--d1009893-3f32-4df7-847d-27226c7e6a93", "sighting--c173b599-3a53-4928-9ce9-c82e2df512bd", "sighting--93ac00e2-0178-4711-b169-4fc846f66fe4", "sighting--7c5b2d78-65e8-4ed3-a627-e942682dc43d", "sighting--6b6fdc06-d4b5-4f03-b6e6-7cd67676df46", "sighting--18cf6b0e-842c-4712-a201-46935bb58eb8", "sighting--e25eb758-f0cf-4fcc-a007-741791d9fef7", "sighting--1eddbcde-4c48-415b-b4ad-875e8be72452", "sighting--786975f8-aace-421c-92b9-25fc9b259ba0", "sighting--ed5aa46c-2bee-4dfe-ac6d-34531e9b250d", "sighting--118d8adf-d272-434f-be7d-afc9f4767fac", "sighting--8a98e307-cdec-410b-99e1-b40ddee81f80", "sighting--692f013f-0b68-4b78-b39a-5c5c55a28485", "sighting--8127c1ec-dcf5-4483-b31c-41151941498b", "sighting--a8329abc-c21d-4498-91ee-c66a248f51e3", "sighting--3a900360-dd6c-40ba-8d79-7f4dd904bb30", "sighting--ebb13351-90cf-4590-86de-93eb7dc699d3", "sighting--dd9b973b-2652-4c07-949d-daecf8567e4a", "sighting--bf26a97a-c027-4538-b505-38298428a151", "sighting--06d5ad93-b6c8-4d24-a53b-a69388c27eca", "sighting--8a0465bf-54ca-4088-9d45-94478d0c8c96", "sighting--f7e59449-57e2-49ee-b7f5-2f54f1811db0", "sighting--2b4052a6-1e0e-45e9-9021-e85b17577b1d", "sighting--148605d2-2e27-4808-bb4d-b9fcf59c9a18", "sighting--7dfae47e-549d-466c-aab8-a23895bd5b00", "sighting--83ac5857-50e4-48d2-bbde-8dd51132293b", "sighting--2c090ea4-6294-4ef4-a0e5-0ffb5d95dcc5", "sighting--76bc92c9-de8a-49d4-bc0a-aae3b4e7db3e", "sighting--f258bf36-30ba-4c18-b8f8-e33424a32cb6", "sighting--d542b25c-c948-45c6-a6f3-ae827291d0e8", "sighting--cf8aca63-97b7-45b6-badc-4e56f35d5791", "sighting--2061d014-c18c-4e5b-9766-dac1cfea89e2", "sighting--273ce4e6-180f-45fa-a98e-e62ee3904ccb", "sighting--d5d409b3-1f62-4288-84f1-f60ccee769bb", "sighting--15729598-abfe-4b9e-8c12-9290f1ee162d", "sighting--0cf98382-33e1-4cc1-a562-6cc533e5eda0", "sighting--453d3797-422e-4a37-8024-1dc214fdc4e2", "sighting--307c5c79-b856-4ca8-8dd7-f889507ab086", "sighting--546b9442-6608-4a89-aba4-f78cf8088260", "sighting--abfe9b72-e9b6-47b8-8748-8e3cb64e7f81", "sighting--f70b4280-9fe4-48f0-a586-c5dc2879e0b8", "sighting--4c09957b-c2eb-4376-9dee-fff4b3edf395", "sighting--8df6a32e-3784-4895-8a33-88278da9634e", "sighting--fafaa753-7deb-4ffe-aba2-bfc6837b2271", "sighting--a741f943-8146-4127-9808-796adf3603ee", "sighting--3121efff-bd90-4712-9bd0-55d9effd3689", "sighting--7c23354b-a518-42bf-b6cf-232adc2c2c34", "sighting--82b8484c-e563-485e-8270-71681fec6951", "sighting--5b44ad41-15e1-4665-aef8-c9c4973bee19", "sighting--84b040cd-a735-4511-92b4-0728f01c9f93", "sighting--25721a5a-3ba2-4f0b-8e34-f257f3e8feab", "sighting--095eb4e8-0a4c-402e-8546-af458bf4fab4", "sighting--53a4b275-e47c-498c-b990-e455f9bcadf2", "sighting--5b23b036-fdd0-4d24-8a17-0ddf0ed4b4df", "sighting--126aaa5c-9f44-4d2a-84ac-8f446d687043", "sighting--628ae696-a7dc-4e86-8da0-71626a18a256", "sighting--e902120f-0206-4905-ada3-392f5b8ca4ea", "sighting--5e56db20-75ba-489f-a2c2-a3d42147b54b", "sighting--28cfb1ba-ae62-42b6-af4a-b60c1e9145b4", "sighting--363804b9-ec6b-4586-a663-4db37c5be9ac", "sighting--03058dc4-7514-4fe5-a735-afa49a8735a4", "sighting--ce631aca-66f1-4a3b-91d1-9808b4685876", "sighting--abbc01b9-697b-4a16-a38c-6adcfb1dd54a", "sighting--7a521b8d-c7a3-415d-8183-e3521c8225e6", "sighting--bc49b4fa-8919-4874-b4de-ca4e5506f8ad", "sighting--c83f9c1e-98b0-4b72-8aa8-07b368d8e9d0", "sighting--71325c4b-1993-4878-87d2-6b5a75066672", "sighting--45c0c46d-1d4d-4890-93e5-d366ccc77622", "sighting--a62f58db-e1ca-48fb-8327-d06de89cdfab", "sighting--a3193193-cdec-4678-a038-685012101212", "sighting--f824f5eb-8f6f-4850-bfc9-0d91cb678930", "sighting--e33df399-2029-49f3-b637-0c321945a32f", "sighting--29aeff74-80b3-461a-9d76-4a3f44819454", "sighting--98de6382-6c1a-48c3-ae6b-83246c04e12f", "sighting--c2a84266-8322-42a0-b62b-5dd7a3a3738e", "sighting--cb2fcbc6-3925-4cef-81e0-ce4e851fc9a5", "sighting--6457c7b5-944b-452a-b5ac-fe738449f984", "sighting--094e4c8a-6f5c-48ed-9c58-d65d42d8d903", "sighting--16950c82-5d03-486c-b459-2c22eb27211b", "sighting--c04665da-58ae-44b2-a6c9-59c7e9df4215", "sighting--93d1d3b9-ad1a-4803-858d-34eaa540e65c", "sighting--d6fcb8ce-5d4b-4f5f-8696-8f25b923a4e3", "sighting--9afadaae-6351-4de1-9398-6f850b8d1c8b", "sighting--96d4b437-63dd-4670-9c49-7bbc268ed4a7", "sighting--ca6bf5a9-335f-40a4-9260-f8bcc8ffb805", "sighting--c95d8528-a27e-48b6-9e63-344343313527", "sighting--11fd07f5-21e3-47f3-84f9-66f40fd13644", "sighting--2bfce291-e74e-4c8c-9aae-24a79f17fd80", "sighting--cde0cfa4-378c-4e04-a6c3-32bf8313a3a1", "sighting--1525185c-fc0c-4fe8-b98b-445f455bc317", "sighting--92d859dc-b727-4b98-a3e3-b0117a0130bf", "sighting--5d773258-641f-4366-864f-a91e2ab3ff60", "sighting--f63ca07a-ed8a-4ef8-8144-12c163309bf1", "sighting--ee6fde39-1ff1-42d9-b87b-48a1047f820c", "sighting--d66c7637-4356-47b6-bc51-d12f9dfac44c", "sighting--2d3a2b15-f160-4431-b905-08d7e0c33dce", "sighting--f7db8d54-5bc8-4cec-9f86-2d09f8f44442", "sighting--f77b5853-d33c-48f4-9e29-37df25bb0355", "sighting--aec6dd76-5d05-47e4-8fff-3a6309235c5f", "sighting--103fe0a4-cab0-4a2d-adb0-4fd8c860b5f3", "sighting--b325a5d9-abdc-46a6-ac0d-0349f9add881", "sighting--cdbae323-9bb5-4345-815c-e9c4156427c1", "sighting--f0170a62-9b49-478a-bb32-b0ecc64ce8ca", "sighting--4d5a3ef2-9346-4a64-98e9-fb4efeb4f4a0", "sighting--cd9bde43-729a-4e37-9835-56839364ee60", "sighting--7e80b06b-613d-4c06-90f5-09673c63770f", "sighting--6de08194-fbce-463d-8961-7c9caf722fa5", "sighting--b34a6779-9cdf-439a-a598-382899e5cbc3", "sighting--a0b84249-84d4-4321-a920-46ff2be6e3be", "sighting--0348fca1-49d5-4844-896a-4752375736e6", "sighting--7f7bc4a5-0a56-45c1-9015-c1732d12b426", "sighting--497286d4-a038-45e8-918c-fa2daab3070c", "sighting--506937ac-bf54-4943-882d-f498e63c2643", "sighting--0ff6e990-9977-4573-9f78-329c1b42c34c", "sighting--80b50f98-b21d-4d18-bff7-4c07d1ca3e96", "sighting--cc4402a3-1a99-4e29-b1aa-26984439a992", "sighting--073e541a-b43c-4b43-9e03-ccb58e2b39e7", "sighting--cd98a822-e830-40f3-b5a9-76da3cb48177", "sighting--a9f3b1e7-3f92-4859-8438-588b9226d511", "sighting--0653b931-f42b-4042-811c-5560de8e83f1", "sighting--e738bd16-2cb6-420d-b5b9-524fa8d8c7c7", "sighting--1aae7a2b-5fb8-4e74-80ba-d7fab46ede05", "sighting--ac73d705-185a-48bb-8a24-359c7d456c22", "sighting--3f31154f-5be0-4732-88ba-2db1f3b181a1", "sighting--dcb15d0c-7ddc-41bb-a11a-ada88ae95cd2", "sighting--424490dd-38e8-408a-a98b-b29739a26b0b", "sighting--5d127057-d70e-4ad9-9509-b982df5e43dc", "sighting--26872b0f-74ce-43a3-b34d-d5255ca51a73", "sighting--85fa8ae4-2237-4a1f-8ba7-b870d52c4bf0", "sighting--5bf60369-1987-45b5-82e6-575745e24865", "sighting--88f1dec8-8cb1-444c-baa7-f62e116be4c1", "sighting--4aff88dd-8450-4735-96b8-28a89018bc40", "sighting--6115c321-8889-43b0-801a-ce98f795a32e", "sighting--6eab6acf-116a-4788-9304-eab98dd5b599", "sighting--97b95978-1dd2-401d-a815-da1ea92c861e", "sighting--dcce98f8-15f9-441b-a784-e570522b2175", "sighting--86e088a8-f9d4-4ee3-a411-ff04fde7a803", "sighting--4104518d-391e-49f6-b8be-617c2b75a8b7", "sighting--e7785da0-5b5a-4326-b182-0f415914e6f3", "sighting--fa5c30ef-02d4-4d2f-922e-ae6591a642db", "sighting--263c1ac0-9a5d-4831-8cf3-eb0e0a062ada", "sighting--5c05e965-a068-41a1-8a90-aebab2b3d3d3", "sighting--c15f53f9-1708-4739-ae06-29715de6622d", "sighting--8c96517b-9cd5-4580-80df-7e70ef643f02", "sighting--f87c2ec9-e407-49b5-a19c-d50935a8c8b5", "sighting--a7c84707-f19d-4945-9f6d-6c98f69a279e", "sighting--677202f9-44e7-47ef-a0eb-eb40999a4c3f", "sighting--3fce4c5e-a528-4451-ad64-b5fdbc793e4c", "sighting--c2eb7252-3dd4-41bc-9ffd-6e9c6327c6d9", "sighting--de318943-b49f-4484-9f01-1caba4fabe9e", "sighting--dec667c7-f8d4-4b10-ba01-5fd562d33744", "sighting--fba6e29a-2c1f-4026-91c3-9ad3c846980c", "sighting--873f7d04-688d-4a65-9ada-4937532e1cc1", "sighting--d9319473-3a4a-4430-bc4e-4a7ee56fc674", "sighting--7fb3a324-25ec-42cf-8637-3638ea58bd80", "sighting--e42f90e4-8295-4940-bbf5-e5011a06bc71", "sighting--152bd71a-e3ba-49a8-b2e3-46313ef8e20d", "sighting--18ec5d5c-86cf-43c1-b150-b1693a7799cf", "sighting--86dd855b-ea5d-44f0-9192-6ebcd0ce441f", "sighting--f494399c-c472-4acd-a83e-37419f80d5a6", "sighting--8d46d486-d7cf-4aa0-968b-4f92ef3371d5", "sighting--655521a3-0599-4efa-b387-79251d7c2233", "sighting--143ca4f9-b319-4f2e-9951-4c11bd5cb840", "sighting--558790bc-94d7-4283-9691-746bffec6a06", "sighting--281da651-2711-4f36-bdab-e23319bd2dce", "sighting--99ee386e-4f57-4a3c-a6b7-1d75a134d0a3", "sighting--ecea683f-1071-475f-bc97-073e6d6b1837", "sighting--d9f301e8-939a-4e71-bbce-369815951b4e", "sighting--2f8b89de-17dd-40d8-bdba-0506a5a2e1c5", "sighting--2a98b63f-5d51-438a-96d6-27848dceba67", "sighting--a18548a7-72f4-4b51-9244-f00b4f8bd0df", "sighting--82a57536-d721-4ffc-a8b4-3311c1039869", "sighting--70a991bd-ad61-41c7-aebd-8972c9011a64", "sighting--59e7a2e2-8af8-42e8-8d97-8ac63eb9f05c", "sighting--76d2386a-f02c-47eb-8480-ede17ea9c77c", "sighting--570e8d49-ee78-4aea-b08b-c04ab9589341", "sighting--a1f93be0-01ef-4701-ab34-5bd01197828d", "sighting--599b5782-2fa1-4ac8-8ed3-011128e82686", "sighting--d6289ead-b2e9-4a7e-b933-f8db12927503", "sighting--58823f60-fcd2-4672-a5b8-d0af320b5dec", "sighting--479604c6-5bdc-48e4-a860-2013b4cf1117", "sighting--4cfc5d19-e81d-4037-a473-c2d2c235bb9d", "sighting--2a8ef353-1a25-48f7-a449-1aa97684cd96", "sighting--e9640256-5603-4fd0-ad8c-b15546f14249", "sighting--39628de9-591f-4b74-b051-f0ec54089500", "sighting--fccf6704-d5a8-49f4-ba84-a60dfeae607b", "sighting--43ad4ff7-7e35-46bd-99fd-52c4af1d6703", "sighting--cda707bb-a398-44c0-91a2-3b406c43533c", "sighting--fe84075a-5633-42ed-b452-4aff6767b0d3", "sighting--85305d37-9638-459c-baa3-f8d643aac3e3", "sighting--bb4880c8-5728-4e30-ba5b-6a5914d0aa41", "sighting--f83cfa8d-bdf0-45df-aebe-0c4284927426", "sighting--c125c32a-f357-4a4e-ac0b-f6a2049e69b0", "sighting--621ab31f-da4f-48c3-8867-abe9a7dbfb24", "sighting--3ec43d0c-d4a0-4d6b-8f21-8045b0e69ee8", "sighting--57d28ad2-2d5a-411d-8049-33cd9feda643", "sighting--fa28ec24-05e7-4ee0-9c45-c10f23f06d33", "sighting--15faa985-5ce5-467a-a39b-203ad17342fd", "sighting--3f974773-46bc-4b14-8292-c97ff9cab7e6", "sighting--3f5f4a22-9403-4ac7-9b0f-901e93ee3b4d", "sighting--8ba0a99c-d110-409f-9746-30f84b66571a", "sighting--51a2bd1a-23b7-4bec-a95b-5d0034b2be4a", "sighting--979201d5-bacd-4f95-92a2-5af831b02299", "sighting--7deace8e-0cfc-4588-8aac-f7908b00699a", "sighting--f2b896bf-760c-41dc-af53-57c764f237b8", "sighting--57c00995-cfce-4726-a7b8-376316746f1f", "sighting--d1a81cf5-8f06-4bc2-ac49-9bde35bbda42", "sighting--6de055dd-3a36-4fff-8b24-08304f0d7cae", "sighting--d5e10355-dbc2-431c-a157-38ecbcc44a5c", "sighting--9c2a1039-9ca5-4b32-9e22-3e36dbdd3a8e", "sighting--1b243739-73f0-4244-b6f0-59ff126d8287", "sighting--7119b4c9-d6f7-4b6e-93b4-523c7cdead7f", "sighting--5390d95e-2224-429c-8edd-85e3b7c49f78", "sighting--c0c017a9-360d-403f-969a-0e5c4d55002a", "sighting--a357ba90-9c85-425e-89e9-9518ab5c8133", "sighting--cd856df3-ca3b-4cf7-851f-ad2cc6af31c7", "sighting--28b8b669-53d5-4048-bfb0-00e1a7fa0ed1", "sighting--c26b4109-7a21-40a0-b855-7fee771010d3", "sighting--1870a7b6-95cd-43f8-8281-73f73df12e84", "sighting--e7aff0f1-0abf-420e-84ea-c107ed10e249", "sighting--921c8535-9bab-48b2-b1bc-0dfb8299f147", "sighting--f054e37a-a4d9-4a2f-875f-6dd0f68064bf", "sighting--72907c87-aa70-44ea-9877-95ff5bd850ec", "sighting--0cc5d10a-d1c4-41c3-84c5-8f3fe74b8023", "sighting--d52a4771-386b-48b2-a64d-529412536d62", "sighting--e4048bdf-2433-446c-9662-35d46faab35f", "sighting--9c2fd9de-e922-4296-8052-b30c895d989e", "sighting--a4134aed-b5ef-45b1-bdf3-4fe2f1d80307", "sighting--b05ba7fb-2a79-4044-91e1-fc756d8ef40b", "sighting--09de46d8-be60-4015-837b-360b25d836a4", "sighting--5c95f7fa-3f6f-4088-ade4-2402b0f6627e", "sighting--33d70beb-56a0-4576-b09d-5f60a131c0b9", "sighting--9434988d-60bc-42b0-8699-16370dcf18f4", "sighting--9786135c-9304-423d-9f56-bcd4a77dde7b", "sighting--6ca0f3e5-92b2-4ebb-8e6d-0035eec8dd76", "sighting--eba72a42-c2f3-4a9d-85a8-eeb9652dc7ab", "sighting--25aa4b09-4aac-4f84-8569-6f2c937ba985", "sighting--e2aad692-c6ec-4881-8169-077f5fe4f177", "sighting--8bed2dd3-d9f5-44b1-a99e-72f658c489b5", "sighting--dd01cdf2-ef28-44ad-8613-a0013fc36b52", "sighting--24944ff3-54ad-4118-91fa-30058b828974", "sighting--35287d55-2675-479c-8031-c3b202edaf19", "sighting--9c3f305c-70f8-4a6f-8a2c-0b21cd7c1966", "sighting--30b54230-76df-4a68-8a9c-3899b8ea2293", "sighting--22966dc8-8ee6-4bd8-987a-ee87aea2c2bd", "sighting--051f6625-01ba-4549-9c43-959afae5aa1e", "sighting--84b4dcb0-1bf6-408a-bd24-a588ad2487b3", "sighting--62a71fee-26c8-4279-b29b-bdf3fc1545b5", "sighting--f069361c-1870-43ed-aa14-4584f6115527", "sighting--e3111b89-d857-4bba-9973-b21fdcf507ff", "sighting--85fd12aa-6568-4c08-8f8d-a0b3866839bc", "sighting--fbdadfb8-15ab-46f8-a534-99a5f3529b4a", "sighting--cf7c7c93-ec75-4c48-916f-24f2244a4013", "sighting--fc503133-5667-4ba9-9ed1-7d28e0ea8f7a", "sighting--06781176-7c38-46d8-9274-d510e3495e54", "sighting--2852df72-fa6a-4a1f-9782-bd341abcd787", "sighting--ef08a0f9-9341-406a-98b9-844847f67fcb", "sighting--aa827d2c-d99d-4951-a729-115fd02c5cfe", "sighting--aa4970a8-2e26-4bf2-84ae-eb56f815532f", "sighting--ec25e3fc-61be-45bf-b80b-a7aed750f13c", "sighting--b421fbd8-98bf-4eed-bc65-e91f1812ffad", "sighting--d161739f-c850-45da-9eca-8ffa86dad69f", "sighting--4157642b-8357-4025-9098-e0ac122d7b99", "sighting--04b0333e-8140-474b-bd84-ba72505ad048", "sighting--897c8803-48b9-4734-a93f-73426a1ad322", "sighting--86758436-c904-497d-a703-a43460fc94d0", "sighting--7ee8887d-fb51-4d02-99ce-1ff41dca14bd", "sighting--3b164060-b9da-4445-a877-befde2919669", "sighting--1523cc38-fff7-4267-a181-a9ff9127653f", "sighting--7065c00d-7bf4-46da-b8c0-041a6eca01e3", "sighting--a2f26ff5-309f-4247-8c39-799e2585cc26", "sighting--f8732255-ade5-4425-87a9-a1a697d13981", "sighting--f082be60-418b-4c33-875b-eb6776c8243d", "sighting--e56aced4-7244-4a18-8f4d-dd0da9c9312b", "sighting--8ca84b7c-eec0-4489-b49e-e1f1ff03bf2c", "sighting--e99c7710-11d9-4757-86b5-cdcca44005f5", "sighting--c75096d5-5d49-48b2-8ddd-27fa87b13460", "sighting--8d69ddae-d0bf-4575-93fa-dd37eedad4de", "sighting--88399c9a-32eb-4993-9234-e77803785e91", "sighting--f2bfb0f5-c5f9-4ba1-876c-d725cba9eae8", "sighting--bc26e10a-32c3-4764-ad1b-6d8327b28770", "sighting--aa15e3d5-3630-4cbc-bb48-bf14597e5da8", "sighting--eaf75738-9386-4471-8064-de048c74a3f7", "sighting--a27fa20d-9ab6-446f-ae9a-36ae3256e096", "sighting--1c090cb3-2094-4739-bd76-46979edd81fc", "sighting--ff337cfb-9930-44c0-90b6-d1165caafa58", "sighting--85f8b953-cae0-4aca-b704-c2aa689beacc", "sighting--77629227-d73b-4b0a-8b88-103c2c8da3c3", "sighting--481ec8d2-bc9a-4aa9-949d-db35018ebf83", "sighting--ca4d2bd1-30b8-48f2-9154-117d04834d3b", "sighting--600e328a-932d-4db4-80e2-09bc9945e481", "sighting--415fd624-4ab7-4397-9bfd-6c0fe7fc1090", "sighting--e54007c3-5c4c-4681-9ae2-2612731e60c2", "sighting--3fee67b3-f644-40b3-8c59-42342feda1e0", "sighting--5930d42c-404c-490c-b9c7-a3ecf4a4b24a", "sighting--0df03b5c-2745-43e7-b248-536b1311ecaf", "sighting--877e12f8-1d9b-48ee-a347-a6a9ebf690b9", "sighting--f2079e34-c8e3-4435-be98-28871dd72464", "sighting--d89243f2-4c89-408a-99bf-8f00f293f7cd", "sighting--4292e6e2-19ea-40ee-a9a5-9d3015badf06", "sighting--e6c80e14-480c-4dc1-83ce-a49f65b66322", "sighting--2dbbbab8-0f38-45ec-9ddb-2e0a45943d59", "sighting--e4ed4f54-578b-4901-ba82-cf2dbeb2950e", "sighting--339aed8f-6d8a-4ccb-a441-9073552624c5", "sighting--fb603811-ff1b-49a1-b16c-d119ab901f4c", "sighting--bd088659-3238-41f6-b43f-9b6d017372db", "sighting--feeffdd1-656c-4985-9e29-f7fcf120544f", "sighting--a9ecf785-c214-4357-af58-4053a484c445", "sighting--c6ebe327-761a-43d8-92fa-fdeb90ec7add", "sighting--902ba7e3-428a-41c8-9abb-e05db42aa1f6", "sighting--221e40c0-2899-4e10-89f8-249be746f7ea", "sighting--912fc3e7-7c35-430f-bb46-b7dc8e1f55ca", "sighting--b5538ebc-6f7f-40d8-9431-08dfa25b0769", "sighting--57ff66de-948e-4068-a5b7-0eb90d31e041", "sighting--761e177d-ad7c-42d9-ad2c-cac6ff6a925c", "sighting--7740c44d-6e84-474c-8517-6c54224c477f", "sighting--d4e7581d-1262-481f-bedd-255f396aad63", "sighting--6744a871-b6bb-458d-9d4d-ef5c787190a1", "sighting--3a48fe49-6fbe-40a6-8102-c5024159f3b9", "sighting--0b4bc965-348d-415d-9932-b74b401afa7e", "sighting--1363cec3-829f-4740-92f3-51ef7d81c6b8", "sighting--5a641484-dfca-46c5-b5eb-3334b0794669", "sighting--56011fa2-d442-4fda-b69d-251551b872b9", "sighting--3e506bed-506a-4279-b58b-4f93c71e0158", "sighting--567b9b04-5a6d-46a8-9a9e-ff6a6da442f4", "sighting--4ee2abc8-f50d-4c8b-a891-ebc84bfb91be", "sighting--7affb44e-b8d7-4f71-82ff-e3af261c9f7e", "sighting--6141edcb-cd74-4616-bca7-63309d7b4e49", "sighting--c2fe67df-4e02-4ce2-996e-b02f08fc79f5", "sighting--508f069a-f170-4c01-8c9d-b7c76a41f237", "sighting--065cfeaf-29ad-402d-9a4d-a284db3c4b51", "sighting--95c86346-98fa-425d-a00f-a4408ef343cf", "sighting--75c91893-2c0e-4d1c-9ee7-1f4f80c39e0f", "sighting--e9dff1c2-72f2-495b-b4bd-dec6eb94e56e", "sighting--c56b75cb-da79-434f-8460-e27dad85bb02", "sighting--e9b0361a-efb8-4fef-97ea-319605301624", "sighting--59ae6393-206e-48c0-ae60-7c1ce12c5c7f", "sighting--67988f82-268c-4468-82ee-98fb1ec48770", "sighting--1ad7ba04-e78d-4337-81c5-1b7119fc1ba1", "sighting--55b4d4da-2c6f-449e-a4d9-4ea51b2f64ea", "sighting--ef74534e-410e-4ce8-9cf5-b19304184b25", "sighting--4c8e13ed-278f-40d3-8707-550013a2e7e2", "sighting--3af15abf-8ac8-4df7-8c8e-a9176bfce78b", "sighting--85cbd42a-a33a-4445-8603-1daa27176a1b", "sighting--6672ea56-fc82-402f-80c8-e8c5895f6698", "sighting--bd2d2015-74f2-4559-b80e-10b5c4c14a30", "sighting--835fd3a2-24a8-4a06-85a6-57b0328902e9", "sighting--e8dc7d82-4aec-4dcb-9c06-1b5e3de818db", "sighting--011afc84-6897-4bf9-859d-5f056fd313dc", "sighting--024bf642-a900-402a-826d-ad866aaa15a6", "sighting--2ba6e7a2-99d2-419d-a20d-1f7168d58334", "sighting--abdb4e7f-b284-4ebc-9632-1bb30e7de2b7", "sighting--f5b5ace9-fbc6-4ffc-bd47-46dadc8c62e1", "sighting--e664d968-ec5f-47ca-b6b7-f2507fc5d8df", "sighting--03d1e89b-0b2b-462b-bbe2-d367f61dd44d", "sighting--e256453d-184d-43d8-8f90-7dcaf494fe7e", "sighting--52b7b77b-6acb-4207-b246-d0a38b93f5ff", "sighting--538d696f-82f1-4893-9e77-27b865e347b7", "sighting--46a8014e-1e37-4ed0-808d-f17d792973c3", "sighting--b53f30f7-63a6-4c7c-910e-5427c070c4bd", "sighting--5e5579d2-00a8-41db-a55e-beb82381ebe2", "sighting--a8a28e06-2068-4d4d-8802-01d9803ec592", "sighting--ecab10d0-33dd-4bb5-8977-98595d356c7f", "sighting--c2ea5792-aa97-43a3-98db-13497d9b7204", "sighting--20902526-3092-472b-8ea9-592217b26880", "sighting--06a28ba6-e47e-4ffc-95a7-808426667d3a", "sighting--55be51aa-0847-4b32-b584-5173274820dc", "sighting--bda50319-1d9a-47b4-9d3b-0d0d3195f0de", "sighting--8b1f3080-b9ca-486c-8fff-81b5e8270d2a", "sighting--41869c55-e58c-41a2-ae66-faaa6b12a964", "sighting--cf9887e9-786a-4116-a111-53333321dfde", "sighting--30c2fa7c-9beb-49b4-b1b9-6b33ce8367c1", "sighting--9a867ebb-b28b-4df3-93f5-d776d4f40586", "sighting--4322b72a-9db5-4eed-99b2-fa472543e550", "sighting--85d2ba60-cba2-4e86-aebb-53e15287ab94", "sighting--3581313a-570e-4d40-a426-2a94501c092d", "sighting--bc339e3d-c571-4d64-b55a-ca19ae95fc77", "sighting--94cc2850-07c9-45c3-bade-87013ea7563a", "sighting--7d807ea6-3085-4e1e-b489-99760894fba4", "sighting--a8c3ba27-9d76-4c79-ac15-32b8fe8b44de", "sighting--8ad2eb85-3d22-4c82-a381-00ce22c1e664", "sighting--61b7ba32-552b-4bd2-930e-8c9a1a9488ff", "sighting--f084d17e-889f-4d5d-b7b9-710273d926c7", "sighting--53c99d48-91b9-4980-bf92-824327103408", "sighting--c438c574-f640-43c5-bd21-dda3deff4b41", "sighting--154cc0e5-e75a-4ddd-8c1d-a86f81213b4a", "sighting--8ae000a0-cc58-4d2c-83cc-0fa0d3288cb5", "sighting--9a2f8a45-06e9-4699-bc3d-f4d35ca32e39", "sighting--3fa37431-3b3a-41c2-a961-ae3405aa3b03", "sighting--50f8f62b-4c1f-412b-b5c6-164bd86f38ff", "sighting--db459ad5-7278-4257-b917-4b60ae2aee50", "sighting--eeb94c86-4f3e-4658-a4b1-654c015c0794", "sighting--6d87b724-328d-443d-93a8-8f6db715b684", "sighting--41e062b9-653d-4385-95dd-ea898ecdfb19", "sighting--08d57292-268e-4b81-8774-d8c2e0383e79", "sighting--bc71625d-a020-43c0-b0d4-37bab2d59bd1", "sighting--89d4a152-10f9-4e7e-88b2-ead23fe1f70a", "sighting--f5c0e9a7-090f-4063-93eb-064e212434fe", "sighting--66a14b4e-cfe5-4ebd-a0f1-33431af76e8f", "sighting--c02a42a6-59ee-4a66-8600-f3647f2c155d", "sighting--ad03bcfa-7ff0-4134-9f6b-22469cf5ba64", "sighting--d8fb3d2e-a98e-4b6f-8010-cce68750187c", "sighting--885a41f3-a10b-4817-af21-d726c56220d1", "sighting--f81df07e-db3b-4847-94ba-c1786e32da24", "sighting--d151c44b-07f9-4e2f-a3d4-e34c34519f9f", "sighting--f3b8c4c4-82c0-43ca-94ec-1a2ad6cb69d6", "sighting--c3cd68aa-d958-40f6-9214-47e34157fbf8", "sighting--b12a437c-fe3a-41b1-8cef-51d642c212da", "sighting--c2bb4f83-c729-40f2-9d47-16f97ce2bd5e", "sighting--6eaf309b-3b2d-4e0f-8c0a-cdb9b1d5c771", "sighting--fe61a0ff-bf73-427c-8039-85992b84a803", "sighting--bf3c6ca6-012c-4018-8e36-4fcd491ed975", "sighting--e24c0a5f-d9e1-4e7d-9d02-179a73cc28d1", "sighting--0985956f-282e-45ef-b76c-3aa16fad39df", "sighting--62366921-65b2-4c0e-afda-8b7460288a6f", "sighting--cc7deeec-b9db-4aea-bc6e-1933aef95495", "sighting--50f6969b-d72f-45a2-acaf-525d2a85472a", "sighting--2c51b201-6226-484c-a181-4cc3d1abb46b", "sighting--46627655-71e4-4f21-b376-b5f071a55ca6", "sighting--28edbfd9-4b0b-41f3-8b39-95ddeb4657e2", "sighting--aa3d2a9d-ec79-481d-a7c9-9a837788ae77", "sighting--584ff719-0394-4400-acd1-6bad06f37399", "sighting--a267f739-129e-42bb-8a58-5fa2cbc9bb55", "sighting--fd927583-f712-45b9-a1b5-ea1298cb8456", "sighting--159d2dbf-6931-4691-b486-47c4d8187eb7", "sighting--b2dced09-d97d-4cf0-a725-04efc92d7325", "sighting--c68db5bd-2431-4455-a074-40abee372399", "sighting--eccc5d29-be90-477d-a529-45b6aa07b9c3", "sighting--a68267d1-f16f-4bae-9f41-17941eef4bba", "sighting--62cd83c9-84ef-4518-bb23-12c55b33d48f", "sighting--0c27e847-6560-489f-af7c-41e6b951baa4", "sighting--2b30acf3-eb90-40d8-8acd-643fe602cc82", "sighting--7df99a37-7a35-46b5-a45b-a754aa0c1b9e", "sighting--538f15fb-c665-4235-848a-24e07b678ac8", "sighting--7e264495-89ac-47fc-9cc2-f12aeee5d124", "sighting--013f3e53-6730-440a-8edb-6af9286f2218", "sighting--46907409-1606-4b29-b907-cbe9dda261f7", "sighting--98dcf042-0cf0-494b-83f2-d3b4a3bc691e", "sighting--1cf53504-80b2-481a-9f8d-6bfe3d144bf0", "sighting--9cc1f21c-6bb3-43cb-973c-ec9163c65dd7", "sighting--16eb746a-1155-46a7-b610-0a889e2805c6", "sighting--33658076-7a42-4e27-b3b0-b60444247016", "sighting--b2323545-e2e7-4ca4-b660-688341c5e5c4", "sighting--4456d142-1dbc-4495-ae3c-1d93340c823c", "sighting--8b4b0910-24bc-4abf-81df-59ec3f83432b", "sighting--447c8003-3a84-4749-9ede-76881223051e", "sighting--d3400258-6cc5-4774-b3e6-b21bc0021394", "sighting--590eb289-b771-4ec0-9bcd-431d2c5e68de", "sighting--8adcec60-708a-4d13-88c6-f832888d94df", "sighting--b6593d08-c9a1-4ba6-9f13-e5c94d34eb4d", "sighting--18c6093f-011d-4718-a518-f20d18d0bb77", "sighting--99eb2b1b-d0e9-4e3c-b36e-717d57d87749", "sighting--013610e4-4733-4706-a450-e7f4bcfbd6a7", "sighting--ae7d62dc-893e-468a-908d-53b65c34e070", "sighting--e8d2a59e-b31c-4b87-ba4f-a0c5f2990ba4", "sighting--31fce3f1-f284-44c0-8311-918a29dca5e7", "sighting--65d05914-be1e-425a-abfd-f738126d0bbb", "sighting--7b45be8a-617a-483f-8dea-119e582b4f79", "sighting--d54c6655-7d8a-495d-bb99-42f15d542353", "sighting--84946e00-b233-4b36-9295-cdf1ce8c88ff", "sighting--28702051-f721-4264-8e55-187eb21cef94", "sighting--288d6f9d-ffa4-4d33-89b6-3517f918ec0e", "sighting--369bee71-1eeb-446b-9d3c-262a710c87d9", "sighting--bc0b28f3-fe6e-4ea3-9b08-ac859659bf4f", "sighting--48080791-679a-4974-a796-eb97d066a81f", "sighting--e56ade13-6186-4116-9130-6045cf155e2d", "sighting--658fcdfa-f012-4733-b592-9590a9bc8a36", "sighting--c3a27e27-3a38-4822-bf8b-c3762b563dd0", "sighting--bad17f99-3f77-40ca-b5cf-1ae5e7cf4e50", "sighting--888073ec-8978-4a3e-8162-fad5a8580064", "sighting--ceaa348e-fe01-45a1-b6cd-7a262ba4ad72", "sighting--c268f0b2-9327-431b-bb28-a4892d056d58", "sighting--98651da4-b846-4c45-97b6-db292288df1f", "sighting--2a90e175-5380-49bf-9e47-5d53a4d03cab", "sighting--913670b2-4d9a-4afa-b8af-41d22b0b0d5b", "sighting--416fabf6-4b44-426f-b5e1-a00a4e61599e", "sighting--a923cd74-c053-454c-986a-438c123facfd", "sighting--c565881a-7cb6-4898-b759-c838f502ddd7", "sighting--99b18e11-e4a0-4c1b-851f-a46512d46791", "sighting--c47b75da-0170-49eb-8583-2746cd62717f", "sighting--14838686-7137-4c17-9eab-578d8c299de8", "sighting--3d347a19-07df-4d49-83b2-ffcacee2ead6", "sighting--0b2c516a-b673-4141-b2db-8e1d930e883c", "sighting--16da039b-93e9-415d-941a-818530a12ed6", "sighting--41f8c36f-5ac3-4bae-8fb7-a858c95a45e2", "sighting--c225273e-96d7-4063-9c4a-ee88e62105d5", "sighting--e5f15331-5d60-4ac9-8c30-67ca215c6e08", "sighting--2782dc0d-1db4-4e82-82fc-028f03b08aa7", "sighting--1dcbc123-8881-43ac-b5ea-356ce13585a7", "sighting--c533be73-c688-4357-8edc-1f7263f1aa1e", "sighting--ce258545-7631-4e51-b2ed-99c61d78d3b4", "sighting--6cda8f00-54a4-4bdd-b3d2-eca54b53ae35", "sighting--563573b4-da90-4770-b137-a46994d2f48b", "sighting--54580ebe-96db-49bf-998a-c2045066a7f1", "sighting--922deead-d5e8-4c32-9145-fd0be66fc311", "sighting--6a7ac504-7098-4c80-bdca-90c90012c35e", "sighting--375c85fd-de11-4a3d-afe9-199f81f852bd", "sighting--9f682c40-af89-473e-909d-e1c3fbf4add0", "sighting--d3f95bb9-ebcf-4fad-91c5-35984c22e4f7", "sighting--eacd7aaf-df7a-4ad4-83b9-c02e5a8bc869", "sighting--2bc55bc5-27d8-4ed6-87b0-1445a166e34b", "sighting--ed73a0e6-5b8b-4033-add7-024b24af51b2", "sighting--e87549c1-4ed7-4df3-9b79-5803674a5670", "sighting--2fcf7288-bc84-49d1-9af0-c7693045f379", "sighting--776c0c9d-c913-43f5-8190-6b926c6119ab", "sighting--6b600802-b36f-4fdc-8911-ebd673afeb89", "sighting--17b4cab2-95cb-461a-98d8-4262d2046d7c", "sighting--83571c1e-230b-4094-ada7-bd47a0227ce2", "sighting--22117fa7-c9da-474e-8cfe-794f3791809b", "sighting--083c23f8-d281-4f1e-a8e3-e386db4efd75", "sighting--0ffe2ae8-ccbd-40b0-b40e-4e64b1c4f159", "sighting--abd00c75-4d04-4f93-97a7-b1652856d8b5", "sighting--ced199a8-28fb-4ae3-a24a-cfdc767aa0f3", "sighting--92a43b6e-d5ad-4585-98cb-01cc049f568e", "sighting--8b2be58c-ee00-4572-8309-5724c0323621", "sighting--c7e9c38e-2f72-440f-a379-806f2b187419", "sighting--5e45c991-9619-4ec9-b022-a077fdf9e769", "sighting--631a23bc-4c28-456e-b278-41ef37a5955c", "sighting--bfef0175-e8f4-47a3-90f5-2075a1f3d1fe", "sighting--83214f6a-d786-42a6-b8d6-5df0cc610299", "sighting--c71ce6e8-f076-4bc1-8d22-4764c2fcabb3", "sighting--beac2f1b-05ee-4d23-8755-cd0c6be0f03e", "sighting--490ae56f-f3e0-4aea-8710-0f697b715ae9", "sighting--8e40cf90-ee30-4722-940b-f4cc04ffb97c", "sighting--f27a23fa-64be-4f8b-a528-0faaae506577", "sighting--cd3890ad-936a-4c23-8eb7-4bfd228103d6", "sighting--54544b1c-d51e-44df-b821-41934dfc0f18", "sighting--d54405d5-c81b-46fd-986d-ed9cebffd260", "sighting--cbec0366-4852-43f0-8297-89382b747a97", "sighting--42306f67-08ea-4892-8340-7f059193a0e8", "sighting--884409d2-0227-465a-80a3-5133524174ed", "sighting--a3d03ffd-bed7-49fb-acdc-f6033f480a35", "sighting--ad054807-2555-424b-ab69-f1daa353f5a4", "sighting--ea586fdb-f4bf-4bd7-9c98-e824ea7b684a", "sighting--a043d6ff-6c77-428d-a6b1-08d66c7ac511", "sighting--f8d5ecd9-0110-48e7-afcf-5158f2f36b98", "sighting--21a737de-561f-4bb9-aea1-bfe7b2a0f1b4", "sighting--132459ff-3600-4977-9a40-f5282c729c9b", "sighting--f012fa57-7bb6-4a4a-bbea-8c845c53fea2", "sighting--6ed03192-4ba3-40ea-9de2-19f31211d86c", "sighting--ae5efd3a-ac72-4f1b-91eb-531ae4d2262f", "sighting--92219208-ed2c-4916-8e90-6f4e8d2a5b23", "sighting--bda89bcc-bbfb-4af4-a171-661e4bd3209e", "sighting--1e47ca9a-32ba-4bd8-a995-a08ea02cfd77", "sighting--c6d881c4-7ff1-49c7-9b4e-4c9e5effeac9", "sighting--f380c0e9-5d6e-46a5-8f3a-897a27a9a53d", "sighting--dc38b5ba-71e7-48fe-917b-2422178e646a", "sighting--3548e07e-5179-4ca6-87f0-7e77eaf8e4be", "sighting--ae57b5a5-8dae-4a8f-a589-8def22669ac8", "sighting--6e954fb6-90da-4d12-afa9-9d31a0f7e84b", "sighting--8c083dc7-564d-4ca0-9db6-f7f350d309ac", "sighting--b4495ada-e36b-40bd-9772-493106508dcc", "sighting--82557530-4535-4071-b723-6fa29585b9a4", "sighting--540ba64e-6d9d-4d17-affd-522655f60ca8", "sighting--9a247674-8a55-4a16-a87a-772ce4bf8297", "sighting--61802aa4-79ae-4c7a-bf54-9400493ed318", "sighting--67c8a603-e5d3-4b9a-a6eb-486b9b88dd0b", "sighting--23307670-f2a0-4d93-8687-f7d8e229f30e", "sighting--b64f21aa-5eba-420a-8f6f-1316128bdcba", "sighting--26bc4cec-305c-40ea-a7af-0522c8ce6e55", "sighting--0c8d8e17-fcef-41bb-bacc-68a1775fc208", "sighting--e201e125-b0ac-4fd9-aa85-c735d76240de", "sighting--cf8fc7bb-9a7b-4b4e-a917-620829a1960a", "sighting--f3fa214a-f6ae-452e-ae01-659a4aaffb40", "sighting--add28fc4-1bef-44dc-9517-624f163fc03b", "sighting--a3037f7e-5b24-4b4f-8cba-3604accb2b8a", "sighting--9a2c33d1-c779-46fe-891c-b6cd1b61bf68", "sighting--83df1470-9b66-4018-bfd5-5bfb2598d2ab", "sighting--0703333d-9125-409d-86de-4467bdb41871", "sighting--97d1eda7-a153-4213-9add-69bb08480736", "sighting--fdfe9ebc-5b1b-405f-8960-2cdbd1b721e9", "sighting--0982ec13-9dbc-45ce-9bef-7677acfcf606", "sighting--e780ff65-ce82-49f4-9dd7-fcb8b7a34125", "sighting--862223b5-7856-46a9-8569-a7a0295e5a72", "sighting--f71b46df-0b4f-4212-bc74-ef5eaffa234b", "sighting--f9287bae-9847-4842-841c-454cbebcbf3c", "sighting--8c1f6792-3381-4de7-b38e-aa7ebe8df4eb", "sighting--20b8505f-db73-4762-9b54-ca11e3666048", "sighting--0bb0ccee-0e39-4221-88d1-987add3197ca", "sighting--1d8fc825-8dd7-47e1-9efd-7b844f7a02c9", "sighting--25add674-06b5-4c38-8c7b-3b47df2b3e2a", "sighting--af908da8-cd73-4e61-a9e0-ddeee3ed6ea6", "sighting--b63f53c9-ce7c-4212-8246-8bff98af7e27", "sighting--61134ba8-3150-41e1-9ffe-8d6c47821e9a", "sighting--2ce5b8de-8605-42e3-98ed-703d5e6f8a92", "sighting--d78e1ece-00df-41bc-8e5f-a5a62ed98edc", "sighting--1d4cb348-91a6-475d-8a9c-c634b91ffdbf", "sighting--556c44f7-784c-40c2-81c1-da49bff780e6", "sighting--ed4725b6-ab1a-4741-a87a-26dcbbf880dc", "sighting--f90ddf3a-0aff-4a0d-b7ef-293027086c4d", "sighting--5d93c5af-0cca-4e9c-b3ba-8baa794ad668", "sighting--1417d272-ae10-4ede-9a18-4c65ffa57fe9", "sighting--4bfef2b8-dcf4-4265-a00f-cd2259001eec", "sighting--6b26dd11-63cd-459d-a3ca-cd2bf6c6ebd4", "sighting--d89bc79c-e0e8-4496-b407-29602fb273a9", "sighting--4d22a109-deaa-4114-b544-447cafa472ff", "sighting--3e09b9c3-195a-4a67-9039-e71fc340e942", "sighting--15677e2d-eb1e-4ff7-9866-88e0e5193d41", "sighting--f782b8b1-1f04-4e56-9543-55387a4c225f", "sighting--51c5a0ef-9d5f-4e3e-8998-4c73e5f18f6d", "sighting--6912beb9-7c73-4eae-8a06-8b1565c052bc", "sighting--324bf150-f286-4d57-961c-b25abb3b8b0c", "sighting--60b35250-3d38-457b-afe7-f36d24cdd7cd", "sighting--ba55f6c2-8fd3-4e83-864b-512f0cadfdd7", "sighting--b0db8cd9-4b86-4162-907f-cad620d25de9", "sighting--3c6144bf-58d6-49e3-b996-1a7c6d7d1e11", "sighting--417fba21-724e-44a3-87fc-a600b1908ec7", "sighting--520f3a27-84d0-4d05-91c3-6cedf170b1cb", "sighting--54225a91-bec3-4714-a8a6-581d8033ab24", "sighting--93283060-d12f-4790-8b6b-cd97bccf6e42", "sighting--015a96fe-7059-4256-a25e-46a678303722", "sighting--a34bacf3-65c0-4914-97c6-c9a72d524b1a", "sighting--72f8624a-99f4-448b-8002-5449532ca749", "sighting--5e6a06f9-67d0-470d-91d3-ae893fa56d34", "sighting--37a5accc-44c3-4244-954a-9d44dd917a5b", "sighting--6c713ef7-1ff2-4b68-bb7e-f06981576a14", "sighting--64c4d5a8-6d76-477f-ba5e-f5f77cea6181", "sighting--ffb0e684-6fdb-42db-af42-336dfa08e90f", "sighting--c0155406-8a1c-4bf4-aebb-b7c4185c02a9", "sighting--590ebec5-c507-4cc8-b08a-b55e68accb82", "sighting--d731f06f-88c1-409d-b18c-d6f7fd1aab9f", "sighting--facb6e01-7816-4893-ba69-1e20316627e6", "sighting--4b43834f-4153-4972-a06f-671d48155e85", "sighting--4a0c5340-c5e8-4cf5-a8d1-b41026e2921a", "sighting--273fe6ca-e0da-4eb8-a9dd-e175008b1eae", "sighting--c1c720a7-ca3d-4a87-a5ee-d5804826f032", "sighting--d87fb6c1-5eca-4f97-972f-74d21ec636dd", "sighting--ddcf2df2-2013-4e73-ac95-7b1263b265b5", "sighting--8a400885-ea3d-45fc-b8c8-c2ec40ac6f91", "sighting--310cda4a-b731-437f-8393-eaf8f3a23930", "sighting--cb9831f8-77dd-455a-af42-693e61ce8135", "sighting--095aeb7b-9bc2-467a-993b-9fb4fe40331b", "sighting--86cdd739-eb29-473b-bc4a-e6ed6a062c97", "sighting--bbdcb1b3-f5c9-4f22-b0d3-8ad259c134c1", "sighting--88ebaa56-8514-4efe-91c2-e230ddb90c54", "sighting--64960056-e07f-4df5-934a-3b6f4e499c68", "sighting--49dd3647-9f58-4db5-8639-990bfea25d97", "sighting--697bba95-1412-4e23-995c-9ce7b0512b46", "sighting--9cb22fda-22bb-4abe-bbe3-82916091c89d", "sighting--b99549c0-3e0c-400a-a13a-7e9bd9f6377b", "sighting--e0a0b011-75c5-4858-b04d-16287a0a9ade", "sighting--37463072-ccac-4cdb-8112-1f91c3f6b652", "sighting--48000cf3-063a-42c6-9a58-12bc172faf35", "sighting--f28626fd-196a-48fb-9c2e-1f00bed2860b", "sighting--80d10bc2-9f4b-45a5-81bb-8f8c88a1247f", "sighting--1d585d1b-d0e7-4de8-8baf-1b82b3accf1f", "sighting--a2830c32-30b0-4eb5-94ad-d28a42200356", "sighting--30e84837-f8ad-47c1-8848-1a4a9e84cc40", "sighting--1ac3822a-a23a-4ca5-b9fe-5212a7fc11eb", "sighting--7190828e-8306-4964-8314-d3bfafb3d659", "sighting--9ad3e628-c207-4189-8640-66c2bb6e6dee", "sighting--47590cfa-b4b3-4ba6-ada1-30f5374f9899", "sighting--a8844145-6770-4a10-8f6a-bf94c8038115", "sighting--081d4b7b-a631-4690-bdd8-aefe84455bbb", "sighting--d65d6b27-fd9c-4174-af78-b01fdac86b41", "sighting--c81ed459-4c0e-4d86-9a93-4c94243904d2", "sighting--9816a57d-b0cf-47ef-867a-3b044612355a", "sighting--b9120b8e-0e2f-42ba-90c2-7b986291bbf1", "sighting--f0bb60ac-e648-4e1a-8ac0-05c77be0096e", "sighting--551ad12e-0281-4d9f-8a60-351236fab692", "sighting--d65592c8-2c52-4e75-8c84-8cf598b732dd", "sighting--654b6888-1b6b-46ff-91dc-fd7cea118aa9", "sighting--d2c95300-39f0-411e-aebb-d665d5a14df1", "sighting--7d41be91-19c8-44ba-9f6b-26041fca126b", "sighting--acc8fab5-ca9a-418e-af0c-7754b886d00a", "sighting--49b35e58-a1f0-41cc-a36b-4d158fe5d122", "sighting--d7b0f76f-6c96-495e-a9bc-9aaabfe5530b", "sighting--fbebb82c-602a-4470-8552-9e07c428bbb1", "sighting--6d1b54dc-514e-47d9-8d57-d36b8d072a90", "sighting--268d7549-8892-46bd-95ce-c94397e75722", "sighting--7bc61fbf-5eb5-4435-8d70-c4d9a56e8f6a", "sighting--4d78114a-4314-455b-b7b3-76ee211274c0", "sighting--d4ca7877-2c63-45d3-80bf-7ac4a8e30fb4", "sighting--f9d0b65b-6a43-45ba-9e30-fa722a728fa2", "sighting--80ff891f-650c-4d53-a364-aa8a0b93ea70", "sighting--1b666b54-a52a-4f48-a7b1-51fc2fc18e91", "sighting--10bcea92-3e7b-4d06-8489-cbb95b267885", "sighting--463a1559-e81c-4f94-a0ef-288804d2ff99", "sighting--fa8f78f3-6aca-4184-8012-087280add724", "sighting--efe1c9e0-0e3f-4def-a7cb-f3a278518a13", "sighting--8d8bb6bb-c855-4bb0-bf1a-04627576a853", "sighting--d769c0d6-aaf3-4e21-9e7a-f3d89bc65d33", "sighting--dd52ece1-ebad-4a7f-bb73-95d3c7e45ff0", "sighting--79ad8d74-b3de-4b88-8037-4e0c54189328", "sighting--e7c3b821-635b-4e13-be96-cb7a42a95479", "sighting--81d7e8e9-5dbe-40b6-913a-9ecd016b70ad", "sighting--287d8dd3-9c62-49cc-bd4f-ab9f74f59dc1", "sighting--56bf1819-5ab8-425d-b342-c207a7ecd7f0", "sighting--d79b8370-685f-4531-bb20-860c3cdd6e5f", "sighting--6d44671b-b098-43b1-a82e-066f00494218", "sighting--14c8884c-d7a7-4a4a-b154-98a8dbd35c43", "sighting--f737b4b0-c74a-4d37-aaeb-dd43df0edde4", "sighting--0dab8bf6-b57f-44d5-9708-6b300e722a4d", "sighting--f4f6ec4c-de2a-4364-b06b-946d7c55e7f2", "sighting--561862f8-2353-4715-8ad3-c6d0b89e39d9", "sighting--5a977778-0c0b-4929-84c8-ce1a68b8a960", "sighting--dadd6eab-b0bd-47ca-8a64-a67a3cd10beb", "sighting--65f6cdfb-7021-463d-befe-f393c1daa93f", "sighting--8c82128d-94e5-48e3-b626-f9a90811025e", "sighting--5dabcb28-cc2e-46e6-9a14-7b545baf8c8f", "sighting--f0f070e1-944d-4fd2-bfd7-331844e14120", "sighting--011e57dc-7313-441e-9177-12e44f1faf9b", "sighting--685dc042-4561-410c-9770-69a2845b30ec", "sighting--7002f9cd-620b-444c-9647-6e81b054c9cb", "sighting--fca0e060-6a6a-47d4-8b40-4a2a25ce4d30", "sighting--c0c2c9e9-c672-44b8-990f-b147a2d66b9d", "sighting--92b06a6b-1cca-4d3c-b018-84ef7ecf385f", "sighting--2fa049a2-eb2f-4f0d-ac77-86efb2dd4479", "sighting--bf791287-3d94-4767-b35a-c54092644eeb", "sighting--2c445a2c-8b61-4fa7-a494-d9547adafee6", "sighting--49df9a21-1871-4353-9109-54c8c324af60", "sighting--c949b78d-97b3-4f8a-88fe-96e8e638fb82", "sighting--fd59a2e4-d343-47b8-93b7-cf88bf554f31", "sighting--1c0ca752-5f2e-441b-bd9c-47ac0d2d14a8", "sighting--1bfd34ab-0830-42d1-917c-5a1f4acb6a1c", "sighting--e67368fd-213a-4c9c-a517-5b97b0a11a3b", "sighting--aaf1c545-033f-40ba-876e-a22b98806df7", "sighting--4aee2bc9-f92e-4c8b-b178-d9be2281f93a", "sighting--cf97d4ea-dcd2-477b-8a16-f87cc6922f7b", "sighting--a3e67020-d98b-464f-a137-f9047d9dcde7", "sighting--fb510ade-3cab-4975-bcfa-b2336f5825a9", "sighting--b57491f2-db58-4e7e-b857-18e676685e3f", "sighting--b7b07a30-2005-4a4d-a9f1-b0ad5bdef6c2", "sighting--d9d268f7-0846-466b-a81e-7e496a05606f", "sighting--bc43462d-f8f8-4aa6-a7d6-92286bd1330b", "sighting--24b93bfe-f6b6-4ea9-a59d-17665d0816fb", "sighting--9d09187d-2bf4-453e-85ac-7ede4552ce04", "sighting--2ebcafa3-a277-462f-bf8c-26044017e38c", "sighting--a6d9f355-5de0-493f-aac0-4f0776435bad", "sighting--2d2881ff-4bf0-4688-977e-1dcf40bc31c2", "sighting--3764c2f3-fed2-48b7-a929-b6bf55c337ac", "sighting--cee39809-28c1-461a-994f-f95128616f0a", "sighting--3dba58cc-e26e-4a92-8319-77e469bb4f04", "sighting--15cf9ad0-caf9-4a82-ab61-29fdb801e8f1", "sighting--fbbd9348-7b83-4a72-84f5-c4f4eaa1e4ec", "sighting--817a51dc-3032-4e9a-839d-fbf49d577120", "sighting--5c8a8c37-9a1b-4d81-a168-7cf92e2128aa", "sighting--c10b2deb-8340-43c7-b0c2-6e396f1afef9", "sighting--84767006-ebca-4a25-89e2-be57b60c0e2b", "sighting--d1407deb-df50-4da2-af28-980cfe8f0223", "sighting--34eb42f9-fff3-4ea8-a904-2e058ee98574", "sighting--17ba61f9-3c0f-4965-aad8-7c76f9301126", "sighting--83d100cf-8210-45db-8b47-341fcd51e606", "sighting--787c2802-26be-4f71-b453-a37b4587272c", "sighting--004bd9d4-36c7-40d5-9b05-f0f4bcbedb01", "sighting--246941bc-3c6d-4e7c-a24c-291dd2167adc", "sighting--89be43cf-fcb8-44d8-b776-e26f45466a89", "sighting--693e6985-8878-4ada-961c-f0058efedad1", "sighting--b4f5c74b-09f5-410c-8b6a-a68cbdbd0e24", "sighting--79d842da-d9cc-49a5-abe9-398318e65abb", "sighting--c89aace3-b454-4b4d-a7c2-5da2443bea40", "sighting--3df52521-795c-47ca-89df-2cf2af9f2cce", "sighting--c2fa46ec-1122-43d9-b751-a67dedd23fc6", "sighting--5ec1ab4f-c8a7-460f-9a11-62e78b8e04dd", "sighting--563f1754-26c3-4b3f-a3a7-292be549d539", "sighting--42a30a81-76ba-4710-bcb0-95f53ca86189", "sighting--64ceae4a-c23d-4649-bea4-843add3760b0", "sighting--72aa540f-d768-4e1d-b7a4-bb2eabf31290", "sighting--219e17e7-a25e-4f10-86b0-f1c08c549370", "sighting--cde60aa1-ae77-4bf9-88c0-131926b4cf1b", "sighting--f577dd4f-7a37-45d1-893b-a6b9eb238fcb", "sighting--7c5a28cf-9bbb-4482-8bd3-1541cb15fba1", "sighting--95650fd2-2036-4905-b41b-4ec45f1f5702", "sighting--92a6a73b-ae56-4489-abd6-bebf04929953", "sighting--f0c6802d-32ec-4b6a-9c7e-f534f32f743b", "sighting--5807e818-f526-4715-8538-4d5c9964d0bd", "sighting--0be486b2-d7c0-440f-ad0d-bad3568471d1", "sighting--dbb232a3-b81b-4a86-8e33-237c0e83aad4", "sighting--804a817c-8788-42d6-abb3-3a9b8775893a", "sighting--47aba513-9e68-45dc-b1f7-c2ee3447f698", "sighting--43790f9b-d4ad-4e27-9533-e7d7f175d703", "sighting--b3b3da35-618a-42bf-85c5-7dd10a113edb", "sighting--9b8b70b8-8890-454f-9c6b-c7a27d62c116", "sighting--22a4ae1d-0487-4537-b685-f91202d08dd5", "sighting--19aec3b0-97a6-407d-81c4-e40d46bc1486", "sighting--fdd70682-451b-410a-90b4-602969bdf406", "sighting--4129c9ff-03e0-407a-95d8-bf0fee9c476b", "sighting--2e6b3529-d1a8-4ef8-9a8b-925d4a057342", "sighting--1b56a8ae-e981-4c93-9602-9ba21bf699aa", "sighting--b3eb9bee-f63a-4505-9aa1-9d5c0c336623", "sighting--5eabe689-ef2a-42bf-b424-5ea7817ca24c", "sighting--6f363ea8-3154-4ea9-ae29-0fcb9580089d", "sighting--1f7054d4-d087-4f08-b0ce-8dd571ab85fb", "sighting--f7a690ab-874f-4dd8-9e90-6a43c16bf75c", "sighting--2ebc7e1d-b75b-43d3-8db4-2ebd783ae545", "sighting--3cf87b60-0529-447b-8b5f-719d4a01cac0", "sighting--a2bb038e-8741-494e-a14c-1729dc7d6dfc", "sighting--1eaf6a29-6ac8-4ca3-835f-184307cb7d0b", "sighting--c08a3c44-232f-4afb-a822-accbdc8532db", "sighting--84946ac3-42e3-4aff-99e4-59901a218011", "sighting--0ccad974-4406-46ac-931b-2d4f1e239c89", "sighting--354bc3ac-3251-4fcb-ac14-20de31fc969e", "sighting--ef8f8041-1b8a-46d1-9e9e-734df6e0ddf6", "sighting--a01a1dba-0392-4c3d-af6e-b520b386c3c8", "sighting--571986e8-04bb-42cb-a1ed-5bf901e8a4e7", "sighting--b3c585d0-b86a-46f0-ac52-0470aa2ac761", "sighting--1c51b227-9223-4eac-882d-02fdf347e9af", "sighting--733cfb44-f6d0-4d48-9d7b-2502ba9f39f3", "sighting--6a4dec6c-1bcd-4800-9901-a0ae686271bd", "sighting--73b7a364-4562-4194-80b4-97028e68deda", "sighting--eec331bf-f31f-41a5-bffc-447888619563", "sighting--206f8fdc-0fc0-478f-8b91-78dda5758499", "sighting--2f4201c1-73b8-4b62-8507-80b42d498a06", "sighting--3eb266be-17a8-478c-8851-f3135e37ac9e", "sighting--4f46b2e1-0ac7-4935-80b3-1497ab7f0849", "sighting--8b035cea-0686-4523-9c5b-23b55d30c97f", "sighting--7cd03bfc-78b7-4336-8d35-1f7e800ae36a", "sighting--8ada84e8-7752-441e-826f-d158a41b493e", "sighting--36224b46-a5eb-4cc5-afac-a4ad93d6916d", "sighting--ab7bbe4b-3937-41c1-a765-ec65a8da9fd5", "sighting--2334fa41-d9af-47b2-8ba1-3d5706a8191b", "sighting--f5c2f19e-b703-454f-8135-b85dcf6ba4f2", "sighting--b5edd0b3-bbb2-47be-9f2c-eace086912bc", "sighting--5b1d58f8-f754-4529-9e6d-d5f05fc73eac", "sighting--84bb3f12-5967-44f4-9ba6-d35e76894686", "sighting--86897249-afa3-4151-bb7b-9118d32aeb1a", "sighting--28c4ad79-fba4-47d9-a6d4-966dc2fafd60", "sighting--86b42a6e-92b3-426b-a8ed-0dc279e5bdb7", "sighting--310ad96d-e8a2-4a84-aaf5-85274a8370be", "sighting--2b5776c0-0646-4165-b609-f4ae5aa6b27c", "sighting--35f25efe-2dd3-4aae-8919-8db15e08c3b6", "sighting--86405f31-7a8e-47bb-91ae-2f975c9b3966", "sighting--209ed92d-d3cd-4de0-8c18-d6bf96d6f1b1", "sighting--4504e23b-34ad-48dc-9def-f4daa08fd85c", "sighting--8e05ea0c-df13-4834-9992-e0932a8e1bc3", "sighting--b0f9e849-1d46-4852-a537-83858e4acc59", "sighting--9819ea33-9f66-4cd7-aaf5-e6a0659cb0f3", "sighting--8712a3d6-89de-4395-9be6-cd9a6eb16a66", "sighting--3256a5e8-75c6-4705-84be-3e032852c261", "sighting--af4307c4-0036-4845-b39d-8f4852eedbd9", "sighting--247ac0f9-84d6-4404-8489-dc619afa67c9", "sighting--1bf18e1a-3e35-404a-99d8-182ce6eaccc6", "sighting--cb8ebb5f-8047-4dec-8c6f-932ff480b83b", "sighting--3521cbd4-125b-44d4-b406-40f2ca92b9a1", "sighting--bc82733e-4fe7-46a3-9df3-50f37377c02c", "sighting--84ae171b-6018-43f5-b8cd-598285d77440", "sighting--59ff6ca6-68c5-4ac6-a015-8e61b3b7412b", "sighting--195a45d9-c1e3-4d4d-99e1-d0d40148842b", "sighting--70d25aba-e91c-473b-9881-160bff9afa70", "sighting--60943e43-68ff-4f2b-b6b6-090d3a8a1f0a", "sighting--dcb62e72-da43-4d0e-825b-f137098174cf", "sighting--16d54a89-4ca5-4ae6-b930-9069bfa052af", "sighting--d020383d-38e1-49b1-9f91-f90f8e0c8f0c", "sighting--d8137b4a-c7b2-4122-b74e-82c49996b4b4", "sighting--6136ea73-beee-4397-8849-fdd9d610e2e9", "sighting--3ba0c3c6-99cc-489d-b9be-1e3cf8ae7f62", "sighting--078f8536-4bee-4348-b488-7cc6c0922eba", "sighting--3f7f5d49-9cdd-4a28-98b7-e8d4c230868d", "sighting--5c2f1bff-52a1-49f0-8771-8908e75e1ec6", "sighting--50d55744-826a-4c1e-970e-b96a32f6ef0f", "sighting--f78a1f26-dbe7-4c47-8aec-177ec06dcdc5", "sighting--d3fecfa7-6fa7-4be3-9dce-66f5c3ff6eb9", "sighting--871ea910-4aba-41de-bdaa-9eb383d4ab5b", "sighting--345a1959-e521-4e2d-8670-e1f8e3dffa0c", "sighting--34a828fc-92e3-4362-9dab-c6103b4a6954", "sighting--72e6f336-8a33-4b41-b3cd-cd60f34d6f48", "sighting--831865eb-0d62-462b-9fd1-2f02edd06c18", "sighting--51c5133e-11e5-4d12-ae65-64b52bcf6dca", "sighting--09fe023a-e0fc-413a-8964-707aeeab95b8", "sighting--7f82bbe0-c62b-42f3-907c-8c627a92b41f", "sighting--88248221-bbde-4ba9-9c01-520f7b48a0e6", "sighting--0f2380b2-7755-4bb9-880d-641bc55c28a0", "sighting--92447723-334e-4c75-8375-eb097045751c", "sighting--32818ed4-f206-4a5b-bc2d-cee705cee099", "sighting--89deef0d-ceb2-4d61-951b-5e715da0fec8", "sighting--6b619548-7555-443c-b895-bb9644423344", "sighting--3ddf0d5d-5355-4876-95d8-8e1d47d5c5ac", "sighting--7ec9157b-a19f-417b-bf8e-986567e69f66", "sighting--fcae7883-b4bb-47be-aad8-bddb23fc7407", "sighting--9fba888d-870f-4089-8db0-9e900103c31b", "sighting--ec06900a-05e5-4ffc-b825-ce1411804134", "sighting--c751fb41-b34c-47ff-b5ef-b5daf95bf1b0", "sighting--27f7a904-101d-46ef-a058-447b171d6f56", "sighting--7ae53047-c0d1-4885-a8ed-6121ef735d29", "sighting--47e16929-1405-473f-a1e8-68585cb4010e", "sighting--8686d372-85dd-484e-90b1-f24dcf9e5546", "sighting--6eda6aa5-05b5-4eaa-9390-911f3b684733", "sighting--ab8a7734-7d44-40c5-96a6-662121017bff", "sighting--1ccf27f3-81b1-49df-a4ff-bb62c8033ef7", "sighting--969c4ac0-1263-4041-806f-d293fc77052b", "sighting--24c40380-08c2-4672-a94c-9aff8752038a", "sighting--8666f933-80ea-4fc2-a0bd-ad77cc895f8c", "sighting--82256c51-b10e-45fe-a4c0-9058ddc24b08", "sighting--0fac87ab-1045-4b0f-a2d7-4b70f566f2ce", "sighting--40dc912c-ee43-4b04-b4cc-c00429d7474f", "sighting--6a38aefc-cbc1-4026-8ce7-43c2b6017ae3", "sighting--9dd48783-1fab-4578-9210-0b25eeea5804", "sighting--930f48a4-e471-4568-bfe9-9e4fdd5d861f", "sighting--5a8dabb3-242f-4785-9c2a-0172faeba07a", "sighting--a1e638f0-ebb8-4356-998d-660a4cd716a9", "sighting--46fb1d78-ae3d-4661-8c4d-e803acb4fd99", "sighting--081301ee-4745-436f-9014-85923881e8dd", "sighting--ae33c9c4-1c8d-4173-b22b-69c2e95036da", "sighting--927df763-b31e-40cb-be66-cbc67bd68b0d", "sighting--5b3eb898-3936-4824-8fa5-ebefabd016bc", "sighting--bd565ec3-16fc-4061-b8da-ac1e7e106530", "sighting--414783f2-6876-43c2-b9ba-717b55c94d3d", "sighting--0ea7814b-284f-4f3e-98e0-0420e05dd60d", "sighting--856da4f5-d031-4686-b73a-dca1c2fb9ed4", "sighting--e0794376-1fe3-4281-92fd-207b5783bda6", "sighting--23fa3a29-709a-4fe1-b8b6-ca0313f4a8c5", "sighting--0c3e6ea7-f5ef-490e-9592-3149ebb90e09", "sighting--fec3ba03-241c-44ef-97c4-f4538c1047f8", "sighting--85a3848a-640d-4be4-ae11-4256420911bd", "sighting--18fd55b8-f309-4e71-8f15-6d94d391dc23", "sighting--41119b72-698c-4901-80b2-f206ea2183a9", "sighting--fc1f6778-44c7-4dfb-a9ac-5dc420b332d4", "sighting--6852471a-4aba-4762-84e7-3160d4fbad78", "sighting--eaa91418-b1a4-42e0-bf16-13894ebf9402", "sighting--84886e8a-04ef-4e55-af0e-a5e10c3cb1ba", "sighting--036ae3c1-ecab-4626-a539-f9b7740d85ad", "sighting--cb6df360-427f-4dc7-acb9-75594088c7a1", "sighting--58282e82-b8e0-4e93-836f-dcb02c8ee802", "sighting--f25b6438-d4dd-4ff5-b967-d70fc5b92519", "sighting--a1400bfb-81ff-4629-aa8f-ff30312771c7", "sighting--68695f11-60a8-4200-8ffb-b64fa7ad8ff4", "sighting--75b6e600-f9a1-4204-a3f4-ec62591a80e5", "sighting--780e2592-75d4-4c18-ad01-d1bd11e7c2ca", "sighting--9422c922-0ce0-4cdd-8320-bd625ce4115c", "sighting--ad313adc-e252-40c1-b39a-f49face2a571", "sighting--baffb732-376c-45ec-9637-c1c408d484b1", "sighting--21fce430-3e53-4f5d-858c-8215096498eb", "sighting--7aa1da25-b381-4351-972f-14afbedd9293", "sighting--7af44961-eef4-4335-bdc5-68f94120b560", "sighting--8dbf8c5e-8dd8-4bb1-b090-13bb0f1de198", "sighting--6ef48804-bbf8-44c0-9c68-b491199e4062", "sighting--340d3c83-2fed-42ed-a4ae-aaf4ba73021b", "sighting--457c493d-9f5b-4c99-b414-c2522bd9a658", "sighting--27c0896f-aa1c-481a-bee5-285c04b7fb89", "sighting--98f9b542-76a6-4d2f-b33b-79758deade2e", "sighting--87df8324-3afa-414d-b5e2-a038cadc464d", "sighting--94005b20-ea23-4d38-8b30-0d6f6ba03d43", "sighting--8ab4423b-7eff-4a10-828c-8542d4ab4a68", "sighting--c51876b8-6aed-45a7-9065-28df60dc67fb", "sighting--a06556d4-014a-4e0c-90cb-b7d3b3d225fa", "sighting--a55dbc46-2cf8-43a6-811f-41e99f4ec249", "sighting--d406e04b-6ca2-40c2-9957-f4b354205690", "sighting--cb38f707-eb20-4070-9e00-48f14c351ab7", "sighting--897ead90-67d7-439d-991c-24ee422bd565", "sighting--5ea828fa-fe9e-4640-9897-1c0ed2bdc7bc", "sighting--7ce5f508-71be-440f-9a59-5d914d4e62a8", "sighting--f1134d56-fe11-45fb-9627-680337816cd7", "sighting--6f6edabc-a4d8-49fa-9598-9f5333884473", "sighting--678dd0c4-5ba1-407f-ac51-3280b5a6b28e", "sighting--3c00fadd-c567-4a43-901c-7e054746ef00", "sighting--227316de-8f27-4877-bfac-8cefff16e9fc", "sighting--52c4bbee-a5e2-4e32-9e69-fd2a6df07bb0", "sighting--ca5d02e8-02e2-4bd6-b312-d6fa26fe466c", "sighting--8237a03e-f6e0-4d9c-b9e2-ece4f9dc38ba", "sighting--27ff2db9-5464-4a47-b003-42a7ec77cfc9", "sighting--768712e8-bac9-4343-933f-b692009d7fb0", "sighting--4d9000e3-123f-4d33-b2cc-1731fc477be4", "sighting--f350c4f5-d35d-46c1-adc7-8b4f677174ae", "sighting--13719a93-b2fd-4bbd-8338-574b60c99efd", "sighting--f4ac6af1-6185-4452-a3fb-47d842a51e35", "sighting--b5550443-df51-4379-9a14-42cfe4800a00", "sighting--daea12fc-46bb-4107-a456-e70b589656e0", "sighting--08147a80-9f18-4032-9597-88d5bdd3f72d", "sighting--b0fd492c-b672-458a-af78-03d52c0f2496", "sighting--d4da0598-287d-4ff4-92a5-b46a2719fbf4", "sighting--528f1ef5-dcc2-43a7-bb8f-25714872933b", "sighting--b79f2c5d-9df4-4378-afd9-246cbd6cfb13", "sighting--b359b475-6f64-431b-a529-6193c7e8b9c4", "sighting--6c1b7860-93d9-4cf7-a664-39f079501c82", "sighting--354f753d-3644-4f89-b8ae-8d11d874f15e", "sighting--ed936fef-9d57-43f4-9e57-0ecbe16d244d", "sighting--25b724fd-a0af-4b5c-a4a6-0f52278eb6db", "sighting--c054400a-26b2-476a-a54d-012bbed97b1e", "sighting--167ae58c-6d38-4d53-bd76-8f9e8c6498c7", "sighting--7185426e-b804-453c-8f9b-fa3350fe8485", "sighting--5eb64cd4-07af-4008-b653-6b753ae362b2", "sighting--f174d235-5112-46b9-a4c5-3d3abfe0538a", "sighting--d6dbf80d-4f8e-4e0e-8dca-fe75bf44b884", "sighting--5fd454bc-33ab-48a0-86df-c285ed92bb49", "sighting--f563b7a2-85f0-4cb3-9070-624cf981ccb6", "sighting--169a5071-7718-4f5c-95c8-5304e5a9c491", "sighting--754d536f-bd72-4877-a66a-42e53812b148", "sighting--64aadcb3-1420-4f9f-87c7-ae70fa92540b", "sighting--6590baa1-1e79-4a3f-a11c-37e9add95d34", "sighting--be97dbcf-679f-4413-ab4d-f44c9fb2a42f", "sighting--ef16443c-2ca6-4199-8e3a-a277fe8fe563", "sighting--2cfff06e-453d-4518-8a06-f8620ddc7bcb", "sighting--67bccd47-19f5-4641-8a08-0aac65f4a953", "sighting--7d083d82-600b-439a-8c3b-c978de6a9d3a", "sighting--67e469d4-f793-4bfa-a51b-1f0eb746f2ba", "sighting--8ee0e8f6-6574-48e2-8e1a-19a53753de6c", "sighting--00e32eb8-32d3-4850-9098-745c1e3988db", "sighting--05256b31-1483-4920-a224-d513ce7b4cb3", "sighting--ade3586a-f0e2-4bc6-a97b-4376ab79b48a", "sighting--f663321e-5aeb-4778-84e3-a9bebcbe6e6e", "sighting--3fba886e-4b07-4d82-9976-d94b622f4904", "sighting--90334f97-b59b-4e18-aec0-7f6090f4167b", "sighting--e9f4eec0-d920-41d9-b9c0-b54468c915e8", "sighting--9e1f0019-92ef-44cd-b88f-27d8464ce6fc", "sighting--24d50ef8-6382-4369-b68b-111ec733978d", "sighting--88520795-d162-43eb-82d5-c74a082c26d0", "sighting--6c05158d-3559-4d3b-9066-6e3317aa3511", "sighting--5a7d9803-ec3b-4c9b-bf4b-bdf7892b7fec", "sighting--7737c5cd-dfea-4dd0-aa07-452d8057d383", "sighting--57774f22-25b0-4f4e-bb4b-4092920f3805", "sighting--beb1a320-3208-4915-8f7f-d5c065f613ab", "sighting--77dbc5e6-df75-40fd-840f-28919905595f", "sighting--05ccfb86-b546-405c-93c4-33aad4133e8a", "sighting--a4539cd4-0f4e-4111-a5f2-74ec641b06fe", "sighting--3093bf67-7428-487f-812d-a345adc35a3b", "sighting--30c1878a-bc54-4fc6-8561-dec0b718fb0a", "sighting--f1945efd-02bd-4eaa-87b8-b4e4206c6fbb", "sighting--79e30bec-3ab0-425d-a5ec-be4f49bd0796", "sighting--cd7741ed-cad9-445f-9ab2-2586eef474c8", "sighting--de5de12e-ae7a-4d87-89e9-51c5f59863db", "sighting--2db984aa-17cf-46be-91c9-6846708f77ec", "sighting--4f723371-282b-448d-98f8-20d22050193e", "sighting--2822a91b-f476-4aa8-b42d-b148bbebd178", "sighting--13c6d7a6-dbef-4ada-ac9c-be92489065f0", "sighting--bac24ec6-ba89-4e84-a656-25c976288fda", "sighting--ef482dac-890c-47b5-8237-4f3c35aba4f7", "sighting--2339e862-f5d1-4402-9900-a6c8455ac964", "sighting--bd9a4450-f39d-4672-8fe1-e84d6f80841c", "sighting--af9a08c5-3966-45bc-8864-0084a0a8d685", "sighting--b265d0e8-90eb-4acd-a6cb-3b63d7e7ee9a", "sighting--d92a540b-f321-4430-874c-5b335aecd510", "sighting--0f972e83-157b-41ea-819f-658c86864aca", "sighting--533493da-90a5-461a-8b9a-235db2376b63", "sighting--aba8d192-f447-417a-a2e0-228abb41ee7f", "sighting--45e12e4a-2cd4-41d4-8e4a-00e68bdb033f", "sighting--17c67e61-9a44-4a31-a9c4-6b202421ee7d", "sighting--85b1531b-93c6-4abc-8ff1-51d2a2d0d1f9", "sighting--34aedfa6-db80-4bc4-948e-e3e4c82c8c6f", "sighting--a8680ddd-ebb0-41d8-982c-0941f11e14a5", "sighting--eca4c9da-b47c-43d3-bf2c-4f8794ccac12", "sighting--ecc25cb3-8afa-4ebc-85e7-8540c83cce02", "sighting--ab7590e4-b090-4fd8-ac97-222e3fb46887", "sighting--11106333-5883-4b08-b41b-719f3eeabae5", "sighting--ed330aaf-f282-42b5-9f5a-67ce26a73a4a", "sighting--4e63a6e5-a509-4ada-a933-68d76bca3c52", "sighting--6abf22f5-795d-4b7b-953b-4581831d7d01", "sighting--f611d6d5-0b6f-48b6-b929-549bae58938d", "sighting--cbe17065-d313-41a7-8314-529293095845", "sighting--11e6705d-2eab-455f-8d98-00436ceea97e", "sighting--e7cc3b9e-5215-49cb-a156-7a536358f17b", "sighting--9dd9b5ee-8a6d-466b-8433-b0cbe376d22f", "sighting--ea0b73c8-9694-4d69-aaaf-85b9d2704e8c", "sighting--2e2d73b2-eea5-4f28-98bc-e03adec7fe7c", "sighting--c1632c44-3519-448b-a61a-43c74451a915", "sighting--62195b4d-13af-425e-b217-78df343186e5", "sighting--ab9fd7c8-0133-43c0-afee-737bae4b2834", "sighting--fbdfa42e-c58a-4859-8106-80d3d074fea4", "sighting--54e98d7e-bb24-4e1e-9149-157a43597922", "sighting--337e9694-8274-4e20-aea3-0860efee5ce2", "sighting--218b0a25-2880-44cf-9c1d-45badda82deb", "sighting--ccae1d0d-b19d-4537-b09d-c8d481732907", "sighting--840943f9-1e27-4e24-82e6-a16d68015cfc", "sighting--a445009d-b1ff-4d06-9a3c-cb71d8efc131", "sighting--5197419d-0ec6-4a17-8648-52c22f24b5b7", "sighting--112b232a-7d2b-4fb7-a72d-1a725e7c1632", "sighting--612e2c52-d812-4abb-938b-c7d9f1b91bfe", "sighting--d4112fb9-1b55-478e-b903-830f2857bba0", "sighting--fcf5cb20-1e62-4282-aa1c-8288cb2a7620", "sighting--347a73a0-5382-400e-87cf-413406cecdeb", "sighting--82b6306a-4fa2-4392-ba8e-c220983feebc", "sighting--0922eda7-9718-4068-b1bd-de24be2f1fe1", "sighting--e5f3a8cd-dad4-4d53-a90e-6d302424f184", "sighting--260d07c7-9a99-4388-a1ca-0f1008b369ce", "sighting--75a16ec2-9a91-47a6-a14a-18f57ac92fa4", "sighting--687a2496-eee8-424e-910c-d6aa7de359a7", "sighting--256166b3-3491-4f17-8f1b-10b09ab364b6", "sighting--d0f3cb20-9dde-4425-811f-8e13bf0374aa", "sighting--89733cf7-3e64-4e0a-ba1c-6670bbfa984e", "sighting--cf6bef77-a575-40de-b98a-7d80d05be127", "sighting--e166bb40-8670-4c02-960e-dd650b6d301b", "sighting--f0313339-a036-4352-9ef1-83fb0cf7d28a", "sighting--4cc7d34e-3523-4b0e-920c-4e36ade12a70", "sighting--b4ce1d2c-b764-41e0-b466-c94590851758", "sighting--0c4ebcbb-2cec-4c42-a4dc-0aa9d5f40a29", "sighting--0f1258a3-9dba-46e4-bf5e-34f6f3d42694", "sighting--0cfc0e28-0dc0-4210-8167-c3229cb46832", "sighting--9bfce3d1-7d2e-46ad-bd57-73bf1f57cfee", "sighting--cc724036-9cd8-46f5-b3a0-46b9cc7e8a80", "sighting--b13fff81-b318-4f8a-a5db-b48415f2f80c", "sighting--602c31cc-b44c-48c3-b49e-75c45ea0393e", "sighting--0e3fee3b-a598-4e54-8c20-4db196a27b17", "sighting--9250faf0-9407-441d-b15e-5599ba97a6ee", "sighting--1885a296-86bb-43d4-84f9-3b86db86c673", "sighting--2ff5acc3-1d66-4cb9-8ae5-56c043b21bd5", "sighting--83aa3e78-b9b0-44c0-b4cc-d017291c9b46", "sighting--7a3fab0a-3394-4f17-aeab-65f617af28ba", "sighting--17f4dfcc-4df1-4360-8411-a979024c15a2", "sighting--976afc87-e38e-43aa-b577-01702aa50db0", "sighting--1fed1880-2043-4a75-801c-bbd8297b52aa", "sighting--4efc6653-3d06-4600-b15f-e07da484dbad", "sighting--14a4daae-c5d8-423c-a2e3-692b63d05244", "sighting--c01faf96-5d12-421b-9c84-2e75618d29b0", "sighting--124ae0ea-f00d-49dc-8b15-fc2bf7f45d55", "sighting--cf882be5-8174-4988-abe0-397d22e90c34", "sighting--bc731cc8-23bf-40c3-9886-4e868b67082d", "sighting--8024880b-6917-4412-a78f-d59996c9d220", "sighting--d5eb8ef1-998e-49e6-96c9-2c39a6af4ec4", "sighting--5cfc638f-1670-404a-8c13-36fc0b7d20b4", "sighting--d0f8e15c-e7a4-44c9-b6d5-3c7dab71c693", "sighting--60dc2979-798d-4c4a-b998-7664cf0a9c2b", "sighting--6bc93786-618a-4e38-b455-f311ccfc212d", "sighting--436442fa-1cd7-4ee1-9ae8-f34db82f1e3c", "sighting--fe268708-06b1-4ec7-ab29-22e961ed9bc4", "sighting--eade4042-e430-4b9a-8373-618c64b17836", "sighting--e7416bc0-cb14-4cee-948b-1e192675e9d1", "sighting--cb2e9e07-69d3-4e43-be9e-b93fb378f03d", "sighting--fa25d525-e626-4c9b-a171-de86e483e75c", "sighting--cea975af-38de-4580-982c-cbdf9dea88f6", "sighting--c3c82dcd-e5c1-4d8f-8e0c-6773aa301bcb", "sighting--8d8219e1-57ea-4473-8219-2787ac64704e", "sighting--e1519e74-28b0-48ee-a532-4beb83779947", "sighting--43b0576a-bad1-4095-aaab-0d5ac5955006", "sighting--82af2474-3800-456e-8a50-4ee797ba9ad0", "sighting--6e52b1a4-f158-4798-b884-7851e63ea9ad", "sighting--cdfbf950-b917-491e-ac50-d1961d9a2dde", "sighting--b654a8ac-ad6e-4414-947a-d8ede420b1eb", "sighting--cb3c1ff8-d414-4e9c-b410-f059e03bb688", "sighting--4f404067-5ec7-46bd-a544-bef360ea73db", "sighting--84499a1d-1442-47e2-8f3f-c7ba4c70ce27", "sighting--5e2cd453-78db-444c-93b6-a53103d4fe27", "sighting--bc44c6d9-e335-4db4-9acf-0cef5ee7131f", "sighting--e04ea6ae-f287-44c7-9254-e687e213ac9e", "sighting--088c3f41-d829-4c54-8aa9-94182ec37525", "sighting--4d53c7f8-3fb4-4d43-93f2-b958f10348da", "sighting--c1468656-1220-424c-8b58-b2113049dfc3", "sighting--2f945795-d043-4a3c-83bc-941594ef18da", "sighting--e1bebb22-02ec-4891-8545-2cadbc8b72ba", "sighting--e89d5f78-948e-428d-a594-ffb28ba5e696", "sighting--9a117288-5aae-412d-9a42-2384ce5acfa5", "sighting--720fc2ab-0149-44fa-b2b2-6701a316edd8", "sighting--dc5f3b63-d2ba-4e56-9e2b-315ee24a455a", "sighting--baee90ff-c177-43de-8f50-5a8392df1e30", "sighting--9647333f-cecc-496b-a5c7-6088ec87392c", "sighting--160e838c-92f2-4d4e-9f7d-8f94746acb84", "sighting--3bd30ea2-2f9a-4dbf-a9b5-24d007d67b91", "sighting--a7d6c8d2-91d4-406b-9d49-b83a02f76aed", "sighting--16d6ed07-2f59-47d1-9382-33fbcb1c67bf", "sighting--452d81d8-7f52-4398-a159-dfa9f402d7ba", "sighting--f1dc6f25-9f61-4273-ae1f-4996735c3251", "sighting--80ddef00-0180-46b4-aa81-6774f72da4f0", "sighting--c117b408-98d7-4917-9d83-74ba8b86ebb8", "sighting--0f4a8af2-a8a2-41cd-90ff-24dbccefb321", "sighting--ae724cb1-f59c-45fe-9c10-57c281417c10", "sighting--b8e5b774-cda1-4a78-9463-713c42bf83d0", "sighting--0e5759ae-877d-4bf3-819f-9d07071b87a4", "sighting--9e74c227-b2fd-4e6a-b59f-9094e941833e", "sighting--056ab3d9-8201-45ef-bc5e-8fdcaa86603b", "sighting--d211a156-bfe6-436e-9099-00cfcb88fa6a", "sighting--b599ede8-d96a-4bc2-ae69-0019d0071408", "sighting--0dee55f7-0ad7-4c56-a560-026c1d65edc7", "sighting--f9bca1be-fc47-4749-947d-65c744f7ba44", "sighting--358e1952-5334-4546-ab5a-b6e241a66ff9", "sighting--2da44eaf-b0cd-4b77-adf1-a6a4837e512f", "sighting--338ceaaa-3c59-4c8e-ac04-ddd48152da3c", "sighting--77caaa57-10a0-4dd1-bd05-8983a70ebc67", "sighting--4900f54c-5988-487e-a92f-2ee08c5ba583", "sighting--9bf0ab77-b7e3-478a-a661-c8493dc10f44", "sighting--8149f448-78ba-45e4-86d9-9138d7558a28", "sighting--cefcc76c-8d0a-48ee-9cb5-b570eb9f4670", "sighting--148af4b1-80d4-4574-a89c-0af7e7bbf771", "sighting--60e3e0aa-2507-47f0-ba76-15737faf97de", "sighting--d97bbdc7-fef2-4633-a97a-6224e35d59b7", "sighting--a2a96c44-f07f-4bad-afd7-f4a37c7ef9b0", "sighting--ee43708c-d679-408e-b64d-d668c9385c4e", "sighting--aafa9e0f-3384-4bb3-9f40-6c7ea6aa582b", "sighting--429f660b-b277-4445-b297-62a0baaf4b16", "sighting--bf8f1eeb-e7ee-422c-8959-3b650acfd4a7", "sighting--d109780e-aade-46e6-9913-27c917397a04", "sighting--2de2544b-8b72-4dcd-aeef-0b13c049c3f5", "sighting--b3e986bf-b963-44ea-9828-f4ad39e4d660", "sighting--891ff6bb-b188-4dff-a805-eed63b9d015d", "sighting--0a9ffe5b-4899-4e3b-a57c-a99e665d4915", "sighting--7007d0f1-6bf3-4a31-be02-81f94bc96665", "sighting--925adeab-e384-4ac5-a42f-34d51bed5aab", "sighting--18342778-6b0b-4a50-8be3-dae9e6e4bd8f", "sighting--6e672d0c-0f1c-4aad-bc3f-99b15fb8cc2f", "sighting--1fdb238f-89e0-45e4-a358-fbc8d94a9d8b", "sighting--bc60b358-3d94-4eb4-bf62-44c63fceb0c0", "sighting--b29f8884-c497-479f-b297-4604ea445065", "sighting--6cdbda1a-e585-4ea6-a523-9f481b25bb1e", "sighting--e7fb51e2-7e76-4f25-908a-5957547a0f6b", "sighting--5b8ec015-28dd-4946-bb58-a4109fa8f752", "sighting--b0e65ee9-3b8d-48ae-b8c1-e2f3c8b62239", "sighting--bba7a8ac-0962-4717-8781-4727d6e2b660", "sighting--c43fd323-e211-4ecf-b08f-7e12502388e5", "sighting--84a00f20-518a-4e9d-a7d6-f0cc4cbb602d", "sighting--504a04dc-8097-401f-9f40-21bc8b906e93", "sighting--8b04e00c-8cf1-4b92-90d8-c9d4d95f0c87", "sighting--1b38dc46-6d6b-46e9-98c5-f565ac53be9c", "sighting--08f0ca8b-0835-4016-b0ee-1352f8a4c2f2", "sighting--4772e2f4-7d1b-444b-b450-b624e5bcb902", "sighting--076989b1-d9d6-40db-a099-81ff6171e0f2", "sighting--d9163b49-d694-4817-9991-06c5fea2c361", "sighting--ec00b10f-e424-4e19-8b89-dde98fa385a5", "sighting--08c98aae-65fa-4702-8126-3de5070eb4e9", "sighting--173dfc5e-98f8-42a1-a745-c551920ec701", "sighting--8dc8fb72-94ad-488f-ac63-089c38befa4a", "sighting--5984ccad-6e59-4817-bc32-18962723c92d", "sighting--f8db684a-4407-4203-a4ca-b284e0382b30", "sighting--9eb7eb20-dff4-4c7c-ba2f-592bb47cc5ce", "sighting--4864a00d-8926-4dc9-89cd-c86c3fddd744", "sighting--eb45f4ad-8ff9-407b-bd16-8747076726e5", "sighting--494056d8-0208-4235-8d03-532a30fc09e7", "sighting--c3f90d68-054c-4854-9813-190aa9b8acac", "sighting--bc33f60d-e3e3-4991-8738-2b3b769fa988", "sighting--ba9995ce-259d-4990-a049-18844aa44ecf", "sighting--c68854e6-f37f-4014-8c89-6fa6a8a60c1e", "sighting--ae34d8e0-1a50-4e43-921e-29d2ad503c13", "sighting--88fb2f77-cd09-4028-aa52-aba5a1f3455a", "sighting--5cc53f87-878c-4b3b-b09b-d22c431de1b7", "sighting--0cd56e2f-2b45-4ce1-a87f-437f8c65997d", "sighting--c1bc38a2-61f0-411c-98c3-acb254bd092a", "sighting--6d12e2ef-173f-4d66-98f3-24a38aa3fbc3", "sighting--3549e790-86e3-4860-8949-a3c7d9a91c7a", "sighting--07c2ff42-748d-45f8-88b9-deff15dcf3d7", "sighting--0dd0c96c-1588-41e3-b930-86d1855a6909", "sighting--196f5994-99e0-48be-b28c-38ad74e166d4", "sighting--5515fc76-8f02-41ee-a926-ccb6d1fd7007", "sighting--402603d0-cdbe-4989-9f0e-2e3643d3656c", "sighting--3662f7d1-9b77-4562-9aa1-a48d87ddf4f5", "sighting--6990e53d-4fb4-48b7-81f6-432fca657384", "sighting--293df916-e265-44f4-97e2-8a14468a8e82", "sighting--66c26218-e2cd-4ad1-94b4-461c51f0609c", "sighting--cf916f5d-4746-4444-aecf-e9942d57d991", "sighting--e2b7601c-881e-468a-8de5-14a910df4e0e", "sighting--63c909a9-bbd4-4df6-b424-522edb875cbd", "sighting--3127bc3b-ea97-40e2-b473-46630544e330", "sighting--d675287b-44a6-4bdb-a187-09582117ecb8", "sighting--4a78caf9-b0fd-4149-a582-031f345a4601", "sighting--cd1443b2-92d7-4231-b451-0d39ba55fc6c", "sighting--d3c77684-23f7-4f99-9c93-ba62ed7b0951", "sighting--9a5a5bc6-dd34-4e42-b19e-30fcb4649b73", "sighting--24d91f85-ad2c-4023-8140-779b2197753c", "sighting--eb027c84-9903-4c46-a3d4-e4dd9902ae36", "sighting--52e4668d-9615-4eb9-b7a0-1aa33fc52109", "sighting--880759f4-594e-41b4-8483-bfce3fc0064b", "sighting--48df9d67-b89e-4252-ace6-79c5f4cfc8bb", "sighting--68d88722-c74f-405a-b2a5-2fc9789a1570", "sighting--5e75d58c-6d8b-4020-bcbf-553d49e395ea", "sighting--9a76ab7c-22b5-4fe0-bbc8-a7badee196dd", "sighting--fbac2607-b375-4d4c-a3a3-988e0e22602e", "sighting--a1c9c530-ea76-4cb6-a12e-47cec1aedd2c", "sighting--3e71f588-ab2c-4849-b46f-aae12c7c3801", "sighting--f923cc47-dbd1-4230-892a-c9a0bcc22950", "sighting--c6dea689-322d-44cb-83b1-ef86049df6f8", "sighting--a92574a1-42cb-46e1-bca9-c9e2b04c13da", "sighting--08aab04f-04f7-4343-ae3a-587cf73b3908", "sighting--12eb57c4-3269-4959-84cf-e8bb9f40710b", "sighting--1d9769dc-1fee-410e-92de-2ce602645225", "sighting--b9bc85f0-3d00-4570-ad71-d34b67fa4b8c", "sighting--4ae18df5-f315-444e-8b17-953ed1c3821f", "sighting--73fc94ce-2764-4b59-9a3c-cfc264170ca5", "sighting--b487e0e1-478f-4290-ae8e-349bff2d06db", "sighting--9df3b757-c936-4374-b07a-d114aa5e2e5f", "sighting--9154c00a-36ba-49d5-a748-e093a35f4e16", "sighting--f084c1c6-1057-4e07-9abf-f7bfbd40aa51", "sighting--b94ac0f7-e210-4c98-bcd7-4d646a01ac7a", "sighting--0ccd10e9-ddcd-4906-aec3-df143cdd0263", "sighting--78ec8273-dc77-4734-86e7-9a89865210ce", "sighting--d22bc47d-9abc-4fb0-8bdb-8dec03b5f0db", "sighting--1ab6e367-ad72-482e-ba30-b0cc78c7f5f2", "sighting--c1e6a2f1-4fa6-4c6e-86ab-e6cecd10ae82", "sighting--aa281852-894c-4828-a138-236c15f65c8f", "sighting--93ba1c2b-7952-4ad5-8f07-7454b7e8b5ff", "sighting--8fb9a5f1-5114-4c5a-b001-3056777a2cd7", "sighting--a487a914-b0bd-4094-b91a-08f7a2485e97", "sighting--b187e43f-3270-4dab-90c4-a594c9ca0f19", "sighting--afae8d0b-6f1d-4c95-b746-ed2d63da74e9", "sighting--6967e72b-74be-46a9-b345-752a6af70bb0", "sighting--9e3aefa7-46c7-46f4-a70a-8aa54715db5d", "sighting--50307df7-cc93-4fd5-85e5-4daa5573df05", "sighting--d4eeeca4-8184-4937-afbd-df5a4dd86f56", "sighting--77611e4d-0b92-4ec6-9004-0aaa024631f3", "sighting--ad35559c-6deb-46b3-8023-70ff83d47c28", "sighting--84f4f190-1476-470a-8bad-16b3cd8d43de", "sighting--e68c272f-1c84-4876-bab0-389eba34ddcf", "sighting--98367fb7-b378-49d8-b0bf-1f1cb06b38dd", "sighting--ddb06dcf-2fed-473f-b3bd-42593021bc4f", "sighting--f5b680e1-0fce-47cf-89f6-c99ae2bddd2e", "sighting--1f058b92-6147-4bc0-aecb-75284fcb6875", "sighting--2fd8661b-8072-4a7c-8cde-034e326efb62", "sighting--be24ab7f-cdff-40a0-b8e8-5aa47d2df20b", "sighting--d6bec42c-5bfe-4f6c-86eb-0b71f071b03f", "sighting--65248960-1648-4f32-9bf4-21a25e58cdfc", "sighting--57b8bf79-bd15-44f5-9a36-e104b3c5ce8e", "sighting--fa78466a-c5b1-4c8f-b77d-5e27e6f4d698", "sighting--12639755-96ea-48b7-b814-24f4998981bf", "sighting--25157aa2-da43-4e2f-8e96-283528830b08", "sighting--05669c72-7c91-402e-bb68-227512210c6e", "sighting--817587bd-716f-41fc-8e2a-17be8b60083d", "sighting--975cfa18-6620-4af9-b448-64825408a59e", "sighting--9eb2f80e-30a2-42cc-ac8b-cf3ef7e7a481", "sighting--e98f51ef-568e-4041-afc2-5c3c732f8bdb", "sighting--ca09f71d-5fcf-4714-af3c-d366fefd2639", "sighting--4ccf57cd-9d79-4d0c-bbf3-934daf86fbd1", "sighting--ac510af8-bef7-4e78-add6-afd9aed0ae8c", "sighting--462e550c-b94d-41f1-87ad-2b6c208da423", "sighting--f335ffbe-8a80-45c6-9cfb-f89e35d29c33", "sighting--6a5ad0f5-2558-44bc-852d-1c97ccaab45a", "sighting--bd61a888-2857-4bbf-90e1-53d3f26466d1", "sighting--aa4acc85-c8c3-4b60-a56c-2897d48c26d9", "sighting--f8e436d3-7d42-43b5-87c0-e2fcf6c9dd7d", "sighting--a2279041-1867-4daf-b307-6cec6fcfda45", "sighting--f8f5a497-8052-4a6b-b92b-2b8e18e8f27a", "sighting--9dfb9eea-a70b-4a5c-9f6e-95e62333db3d", "sighting--408c3409-87a8-4a72-b4f6-ac771ae911ff", "sighting--1b3292e9-4e66-41fc-a962-035e679c85cb", "sighting--bc5beff4-d48b-4d34-9ad1-877affbbbc80", "sighting--4b4d78ba-c74e-4776-b834-9fdf46d1b764", "sighting--dbecf70a-a9b7-4761-97cc-c8468aea0039", "sighting--0ef53910-a30c-44e3-9733-b531525dd1fd", "sighting--6c867fcd-fdda-41bd-ab63-0fa895b2b070", "sighting--3cb8011d-b8ce-4152-8509-6bfb72298200", "sighting--64225109-9e85-418e-8233-307d82f2c1e4", "sighting--83009395-95b7-426e-a701-9bfb728be00c", "sighting--1813ec6f-fab0-42fd-9dd7-8296b4370e54", "sighting--4ac0318b-bbcb-4e89-b897-65f7a017fb21", "sighting--e7e9f611-a2d5-42cc-a228-2902d0f22b60", "sighting--9ce47fe3-ae97-417c-a49b-3e05327ecec0", "sighting--692fa7a9-e405-426d-a847-48b1ad6fe256", "sighting--b81f4857-194a-4000-936d-2f5b4858d923", "sighting--9435801d-8fef-481c-9bcb-8f4de82afa4d", "sighting--1f1a912c-3fa0-4944-b8f0-19d9d4b70723", "sighting--f4fefd0d-f519-4a04-aee3-dfb82d1f0916", "sighting--2a785c89-8cbd-4738-854d-db5c29efd44b", "sighting--4f8b7e6a-3630-471c-9fbc-72fc51569d9c", "sighting--825b4696-9e4c-4b3b-af53-8b55fb5fcae5", "sighting--bbdd86cd-6fe5-46fc-a54a-940d69a1d247", "sighting--00432e72-dc01-45c5-a289-6945e5f3fa18", "sighting--aceab646-18c0-4f9d-be01-b1ca47b4565e", "sighting--437bc39d-d8d9-4ccc-91db-0d4fd72cfa2b", "sighting--3030bc01-cead-4fab-b2ba-d2631e50f409", "sighting--cf9d84ae-f3ef-487b-8ea6-22a7547f90b6", "sighting--2361efce-1130-4095-9424-f2c4a0c211d8", "sighting--fb7e2216-4189-46ba-b214-fbb872e2b5eb", "sighting--0b02ddab-56df-4327-a684-396b3546c646", "sighting--764c08df-8bf9-42f3-a0e4-4e33a4f1ca86", "sighting--95c7660f-658c-47b4-a587-ed4c573c48a4", "sighting--85b904b3-087b-49a0-bd78-8ebb89210a80", "sighting--5c21a552-7256-4df7-b118-682b8d9789fd", "sighting--948e48bf-6b69-4e57-b78a-b547d85f39ac", "sighting--6f341033-f029-4823-a54e-4662205a802b", "sighting--afc90e55-a6e0-4eeb-9670-c4b35ff8db0b", "sighting--fda64451-f922-47a4-a4c1-93129d74e28a", "sighting--1b168c0b-eec7-44d5-a452-5a9ca0b5d38f", "sighting--3408181e-6e5d-4a80-987e-fff839bb31ef", "sighting--d0a1acb2-63a6-40e2-84c3-c38670bc861e", "sighting--f14a234f-fb53-4d9f-b3b2-508c9abb584d", "sighting--f33a388f-19f4-4a41-9fb1-1730ab0c46bd", "sighting--c7e4b7de-17ad-41ce-a74d-6ef311b52163", "sighting--6d63a122-31a6-4ba6-8522-710a91171c34", "sighting--e9dd6cb5-335a-49de-b7b2-4ba316d6ac47", "sighting--c698fedb-e66b-44b1-b244-f44d669728b7", "sighting--1e56858f-f98c-4cd6-8865-b8bafc20f4a3", "sighting--a23ac779-6fe4-47b6-8eb6-8e9d84fb43b3", "sighting--50922d87-d0e1-4e0b-b933-5f3354413174", "sighting--f3a1b8d2-792e-4ba5-b520-2249a29f01ad", "sighting--6020d4eb-c47d-486f-9df5-52f5fbb21146", "sighting--70bfaa1e-25d3-49e5-8a57-2340cf48a77f", "sighting--da1ccbb4-0125-45c2-825f-46c4a34400bf", "sighting--5cf09fd9-abf0-4327-bdc8-26f907ee8323", "sighting--8bfb3f99-d3d8-4ac4-a10d-1cd27f898cd1", "sighting--d22b72d1-b0b6-4bc6-8a16-0496fb3370bd", "sighting--696e6a45-9c7d-4ad2-9413-3adb0cef6bf1", "sighting--db401a72-c3c9-4b79-bad4-9608f895fb28", "sighting--97cab13f-0946-426b-a581-8e34bf6b6fe2", "sighting--835d3187-4e7f-4416-9ade-2b68ddb7acbd", "sighting--a12a4f4f-145a-4798-90d8-8276ff9c289c", "sighting--f914eca7-b6f1-4a01-9915-f27a124bf44d", "sighting--5bbbaf8f-d19a-42c0-9649-e1175e18b9dc", "sighting--b4665a03-8de3-413e-a287-4e10df8543bc", "sighting--61a008b8-e18e-4927-9db5-84dc88626102", "sighting--676f9132-46b6-45e4-b530-b4f07fc5a2b5", "sighting--c0e1915c-07db-409f-bed5-db8834694262", "sighting--f070788a-f637-4386-84d2-e71fa33a2119", "sighting--5f3daecc-5a64-4e81-a846-47e0afb6ebe4", "sighting--16fb2561-2afa-4c6c-97df-8f5f547336eb", "sighting--e26e9362-78dd-4acc-b213-e663ee444f02", "sighting--11eceab0-7231-4a1f-af0a-e0536e5b9d52", "sighting--27f562a3-4642-4137-9617-3a2017b464a2", "sighting--25c40afc-2848-4715-8556-25a9082b4c05", "sighting--72de5646-af87-4af2-b885-1397005194d9", "sighting--265e95b2-4847-4ac9-98b1-ee9ce5ef736a", "sighting--eebc239e-ca47-4c70-a111-30e7f973509e", "sighting--65500b87-a9d1-454c-9173-16e4010eefa0", "sighting--c5eb4ce6-8517-4d56-a686-434b5f3c5985", "sighting--9ea4398c-8373-4244-80d3-9e721ce5d1a4", "sighting--f202b94f-a11e-4043-88c1-b1e036c4d22b", "sighting--9e5016d0-1fcc-404b-b867-89b4a699cd6e", "sighting--1f7dd40a-8ae0-4a90-9df4-6f4a6a052975", "sighting--9a6a7911-e0b2-47e6-b7f3-40a73732a29f", "sighting--b3a05353-15cf-4463-b977-c885f21bcccc", "sighting--b5e33bb2-bd03-4181-bedd-7561e81dcc82", "sighting--2573370c-5d70-4875-89f1-1af64902d759", "sighting--c00a52c8-8898-4aeb-9f2d-7f2a24cd25cd", "sighting--1deb492d-8822-4851-b396-29f7d677fa0f", "sighting--6ac1042d-6b90-4ca5-9cfc-ba556e66a251", "sighting--98298b1e-88db-4bb6-bd76-76ea300e13f7", "sighting--c6c6589f-2a83-47e8-b55b-4bed3b08dce7", "sighting--6a8227db-3c3d-4ab5-a625-b53fbd1813aa", "sighting--cd572ce0-5a03-46e7-92b0-e5da2b584354", "sighting--1c9161cc-5dc6-4a11-8517-f162100a4cb2", "sighting--1b8c387e-1bef-45d4-9c82-9d3b00d81655", "sighting--36d04a06-1cad-4ca6-8696-c2b59b7d6a83", "sighting--d9aa0d27-3a12-404a-842b-8dfd16f5b60b", "sighting--c3a10346-9975-4c57-a9de-0dfd579483ec", "sighting--90b450f3-dad5-439c-b8d7-1da220e0a668", "sighting--9e48cde0-c399-4a0d-90a1-d0b0425c08cd", "sighting--d8ce6db6-9c70-4ba1-9f7a-736f5580a465", "sighting--5292f5d8-2f34-4d3a-807d-7761adb596a6", "sighting--fc158765-7d31-4823-a362-6b6f6f79537c", "sighting--5ef970a7-670c-478c-bfbe-6a059b8b4678", "sighting--c423afc6-1264-4a4c-9be8-84d15470e77e", "sighting--15f44e22-87fc-4e70-8bac-614b2f7326fa", "sighting--bd4a3401-5cbd-41ca-ad49-e852d4a716c3", "sighting--5fa8fa7b-7f57-4ec8-a459-c4e004dad8ea", "sighting--0eccce72-e4cc-45e9-9ea8-0609c013cac7", "sighting--5f4248b5-7010-4027-87e0-d334f835cc1c", "sighting--67981147-42e2-4fb8-9293-cafe1ef23f04", "sighting--9447f4e4-1169-4dc1-beea-595ded2673e2", "sighting--7e852042-4f9e-46b9-b284-da3ffde96c19", "sighting--83917935-8940-4cbc-924b-fd1afcd5855d", "sighting--06e6ab44-6ad4-405a-8f4e-34e961f20638", "sighting--b8bb039f-ee25-45a6-a510-e33db006583c", "sighting--a6c644b9-36ee-4f17-a2b4-0d449b834332", "sighting--5977f3ff-eb5d-45a2-8e4e-3e5621102dd1", "sighting--2cb7aa93-b8f1-491f-87a2-80e0b7688e9d", "sighting--55020525-750c-4f89-a52f-e173ff342c8a", "sighting--0af96a86-6318-46a5-b5f0-2ec3ed1e64de", "sighting--dc325e77-a56b-48f7-9002-727ce2c385cd", "sighting--8340162d-cfa7-40ec-9758-af31b8136b38", "sighting--49d3c046-a1f1-460d-9d0a-f3ddb0c966fe", "sighting--52bc54e8-ac29-4b0e-abac-a26716c6b8dc", "sighting--f2bba7dc-d0c9-4315-942f-05927cb9aa86", "sighting--f36fe9c3-6f8d-4dff-99fb-47f0350345cd", "sighting--bbf69373-5a96-41a7-a832-24dcb9acfaa4", "sighting--32d19673-46ff-44a5-b0c6-df8d01fe8475", "sighting--1a8c3d4c-67ff-4a85-82df-57d0d221d609", "sighting--4c52fb3b-5ef8-4b54-b087-f21d5c8720f2", "sighting--5859672c-26d4-41d6-b420-e4ea3fee98e9", "sighting--3df9d98b-064c-451a-a535-3b062f4c8fe6", "sighting--80d29035-4d35-4358-8b12-9ed29e84302e", "sighting--7b67d840-835b-49b0-84ad-08d0a7278ead", "sighting--1e435434-c7ce-4fd0-98f8-e1e5de2fb8c8", "sighting--4d61a6bb-fc73-4017-ad39-dbdbb30ef8e5", "sighting--afff65da-56e2-4cec-b487-f072e6c4e9d6", "sighting--ba4f62f8-c051-4aa6-a265-9236d5d2bae4", "sighting--d8d78289-6fba-4f48-a243-ea302a67eebe", "sighting--20e98d45-2448-4d16-8706-fe995f4a1efc", "sighting--3f9aa637-3e9e-4d79-8209-ea5b1662cb86", "sighting--1a7aa6a6-19af-4020-86e8-091e17915308", "sighting--7179655e-4ba8-4511-ab13-d0d253c57347", "sighting--baf73553-316e-4a46-8fdc-883b813b80ce", "sighting--27d739fd-40c6-41f3-9001-eea254383e50", "sighting--cb4b4b2f-f802-473c-b242-644e876f33d1", "sighting--2dbbed54-074c-49ec-a297-b30f89c65989", "sighting--8d20dc8c-4ce3-4a36-8543-c350763ab935", "sighting--480b60de-deed-472c-a147-407667db9387", "sighting--02ce5e6a-fc42-4602-9332-8da89f4cc01a", "sighting--55c6d496-b75b-464a-b8d8-d4498be83828", "sighting--21e0794b-ff0f-413a-8798-2d97c4971fa3", "sighting--d8081929-8e5d-4648-ae54-0e35fa447d5b", "sighting--3bd45d8d-da22-43e6-a6ee-d87545bce34b", "sighting--0922ced9-0db6-4e2d-b84c-dc3ada29457f", "sighting--96e397fa-c2d4-4d6b-b6d5-4d3e807d9b7a", "sighting--008a83e9-fd8a-442e-9b19-0b2a615384fc", "sighting--346cbb9d-a6b0-403c-9164-ee73bc447680", "sighting--5b840d96-fbbe-4860-8a47-6bfef4cbe297", "sighting--a3b09190-366b-4080-9a5e-82ae99d19adc", "sighting--3a86922b-d7a0-415e-8003-e4f9c6a46af6", "sighting--24126df5-b139-4e4a-9f02-c307602ab00f", "sighting--1266e7d3-418f-4eb0-adbe-7934732479f8", "sighting--d5834867-b9d9-426d-a84d-32fea294cec8", "sighting--368699a9-7c27-4527-a465-90e680af8a80", "sighting--73b35c7d-8469-46f5-afa2-69c95ff36805", "sighting--23c13a47-46b6-45f2-ba59-2f1a3d05b103", "sighting--5db361cd-6fd8-45a2-94e7-80748e76ba54", "sighting--8cf70b80-2b59-4bd6-997d-247a5cb3b902", "sighting--f0aecddc-49e8-49b1-af1c-1238030ff023", "sighting--802ca4dc-12d3-4e7b-ade0-fb0f77196e46", "sighting--c28d192e-d0b7-4af9-a06c-ef6a076715e9", "sighting--dae5f403-1557-436d-b7ee-e72c748a3fcc", "sighting--af49d2c2-20bb-4c9d-9721-51fdd4498d09", "sighting--cb0cb2f5-0486-438d-879b-f7036371a99c", "sighting--041b0190-2ce2-4858-a0c6-4c404d309f01", "sighting--6db911b0-26c0-496a-83e3-a8ef2e160ee9", "sighting--de16dd6e-4046-48ff-be14-990da7d0baf2", "sighting--d2f2e4e0-b2f5-4160-9160-2a1002a1b656", "sighting--2ec59328-62a2-4237-a4a6-a3a7991c420e", "sighting--7c206081-84f5-40fe-870e-104054255160", "sighting--95744fe7-9790-4c10-8328-104da6b0dd9b", "sighting--02395e12-1d84-44ef-8f5f-9bff4c1e6af9", "sighting--90b4f4f8-4231-45f1-8d0f-fc228a80ff95", "sighting--c5d68653-d9b8-4a0f-935b-a472baac2eca", "sighting--6e71d7de-1f18-463d-b7b5-340f32af60ac", "sighting--503e8895-30d8-4303-a6c8-12188044e391", "sighting--0e07b20c-47d4-4d3c-9ee2-9325e1053f21", "sighting--220cdc91-2aeb-47bb-b47b-37f5c8f3f47b", "sighting--1059c9ff-a614-455e-9a60-bf9e2ce0a63e", "sighting--3076e136-bae5-4bfd-a3fd-886adaf8182b", "sighting--a739c422-a6e4-466f-959d-2e2ac45a4ad0", "sighting--c9fae76e-77a1-4b88-9f1b-f070803cd571", "sighting--2742cb15-4420-4c86-89c8-db362548c31a", "sighting--d35621bf-378e-4c1b-8d57-6f4411958f3c", "sighting--9836d811-e3b0-41a4-ad16-cccfb150e4ef", "sighting--b4f3612c-fb46-4718-bdf9-9acf0444b421", "sighting--ea86e6ea-c261-4523-914d-e9ce3c709f9b", "sighting--32c967c2-c149-4ced-a8af-1683f1bb783c", "sighting--b19ed607-9da1-4512-bea5-76669c1dab94", "sighting--72737f4b-fc12-4d54-b0e0-489f4c9ecf6f", "sighting--6a687c77-008d-4985-b032-ce74bed36d9c", "sighting--3c64de1b-cc08-4feb-a467-0dd2a076a1a7", "sighting--eb24d948-174e-4df7-9508-c9cf8b34f852", "sighting--fe740df3-d1fe-4075-b3cd-359519cbc50d", "sighting--9b0c43c8-aafe-4b35-ae9f-ca94dd68b66f", "sighting--4411554f-0c0a-4a52-b008-b7477382fc77", "sighting--ae9ae4ad-94af-4618-b3b2-29a5cc1a2501", "sighting--b423ba64-8723-4e1d-9db0-bab3d69a0160", "sighting--98a8b1a0-16cb-40bd-9d53-4b1c6bb218e2", "sighting--492452ac-6e8b-4349-b955-d2601201fccd", "sighting--524bcbed-90fa-4db5-842c-cda329180f98", "sighting--cc43afe7-c446-4102-823a-d276dc72fe1b", "sighting--57a7d49c-d2b4-4d84-a009-24277179cc6d", "sighting--6d8d2cb2-5e10-4ef5-b74f-8bba13fadb63", "sighting--ab1528f8-0100-405a-af94-85b50d9c6594", "sighting--b05b9e89-f54c-4ca8-83d0-041cd3ad1654", "sighting--aa31bd1f-a6b5-4ab9-b2fa-dec14bd4e42c", "sighting--ac054dd0-b0ab-4ae9-9efc-f93c916feef7", "sighting--af638a53-993a-4deb-91be-413daa8ac2dd", "sighting--bedd360c-f337-4dcf-b68a-590d73a08812", "sighting--383a4ac9-f831-4eea-8bb7-b0b82da16da5", "sighting--359ce9e6-11eb-449d-9ae7-07038bdd6299", "sighting--5f6bc47c-4281-4560-b85b-a8163c00c820", "sighting--2ecc180c-83b9-49e2-b30e-77b1b2df6983", "sighting--9c134c3c-0a48-4c7c-9eec-e4d2d453ba62", "sighting--9ad646c2-fa83-4088-a946-4bea5213b1ae", "sighting--64107013-b529-456c-a244-5120df1950eb", "sighting--f00f3085-d3c1-4d72-ad44-fb6ee80235ed", "sighting--2869e55e-7c95-4a08-bbef-90258c19c39e", "sighting--a8446047-9b9f-4dc1-8455-52f99d73c3bc", "sighting--1e82b21c-39de-4355-ad09-c1f06da092b2", "sighting--209d3c25-3183-47b9-8cfb-8859d02dc9b1", "sighting--6e2e5f8e-6b2d-4370-a7cb-c7427b09e2e6", "sighting--e92b7ed3-7eab-4d8d-a65e-23dfdb5a5c64", "sighting--65ee99cc-608c-432d-bcb4-5c204df32c17", "sighting--e4f9a1de-6f3c-4806-ae2f-aafca0a25d2e", "sighting--cb7d7714-87c7-427b-acd1-a3763dfdaaa2", "sighting--53f30df9-a456-416b-aca5-7cabc9470d73", "sighting--d2666fff-edaf-434a-b33b-a4feb7ba41ba", "sighting--e922212f-ba30-4467-a4d8-a1743d44d029", "sighting--961ea1b9-d61f-4927-85dd-4b1a1a08f35a", "sighting--0e0b2605-61e7-46d3-a952-76033fa50bec", "sighting--fe0d1ed6-e8fd-476f-a95d-595763471712", "sighting--7c7792e6-af9c-4812-8ff3-714e1ea65794", "sighting--3a367b72-5efb-4c53-92b8-ec17cc45efba", "sighting--f85be007-7975-47fe-b1cf-abc1ed1cb9cf", "sighting--1c7df029-8cef-4613-b5a3-ebdc9bf985ba", "sighting--d7b38fe8-5d9b-4ef2-bbfc-3f09532cc6aa", "sighting--8d0c3244-14e8-47a0-9e32-f6db641d49e2", "sighting--2af8f5db-ea5c-4bd6-98f8-cf065ad83bcf", "sighting--8a204e7c-35db-4aa7-b2c3-fa66d44cbe0a", "sighting--adada6b3-eb13-4437-bffe-ab6cc2def58c", "sighting--4106a420-c088-44c4-a51a-e8899ca06b4f", "sighting--a1bb0443-1347-4b81-9946-6721693d8673", "sighting--26842f65-a19e-48a8-bb07-b40f287fff0a", "sighting--a0415dcf-e873-41b3-9ae0-33e48bb8abf3", "sighting--127102b7-f00d-4b6a-8603-de4defe64998", "sighting--142daad3-36be-489f-a831-d4377b9552e4", "sighting--a10f5630-6b9d-4ce9-b60a-b2d6f8668a49", "sighting--2f50eed8-c5f9-4143-815d-e74c4a82b59b", "sighting--79256e91-e572-4928-8025-c1e801618bf3", "sighting--8a145d79-c3ba-4b32-8eca-1650f2673d16", "sighting--7ccd9a87-1dc0-4149-acf7-9744c26aa638", "sighting--3ff721f8-67e2-4f96-8559-3b6959b61d72", "sighting--d8944b68-7a80-44ba-b4da-08cb08dabe45", "sighting--90635b7e-62b7-424c-b282-f2f8ead11484", "sighting--e5ced1a9-d6cb-45cc-a749-41d291bfb500", "sighting--16a082af-7123-49ae-81a6-9126b396197d", "sighting--55cdc425-9d3b-4266-a26c-11fc7f82e3f0", "sighting--f4c60d58-0bf1-447e-b1dd-eea90d1eb11d", "sighting--4b72730e-28c5-41ca-bc56-bcb77a398aed", "sighting--8bfff45f-ea8c-43f1-941b-42d545af1212", "sighting--a55bcbd3-8a3a-4fe2-88d8-d89c382b9d73", "sighting--94493f77-f023-4f23-9cdb-773533aef822", "sighting--923d508a-e3fc-4e38-8084-c9f07e770f26", "sighting--d42e6987-d2fa-41a3-b47c-b0a55a4dd40a", "sighting--b57ddbf9-fb13-428d-94e5-20127f2a5c95", "sighting--e1a65c91-63c3-4628-b3d7-04330812f7c3", "sighting--43a112a8-dee9-48be-a42c-150bac6339ff", "sighting--0f29b24d-bb1e-4cc8-bcc8-f5ac5dc94317", "sighting--0ed30c7d-5007-41ac-9aec-8b6fbc96ba70", "sighting--ee85b69c-d9db-4f5d-b0d5-47eb895bdc8b", "sighting--e8cc6149-5856-4623-ad94-1eeac64be3f5", "sighting--8894c229-3ad1-4d3c-a638-d10eeb7fd87b", "sighting--0ae5d5dc-3a93-42ee-bd8c-32e5306d01eb", "sighting--1873e51b-fd39-44dc-afc8-75df85fa2c9f", "sighting--2944796c-9387-4f4f-ae86-ec37404c86ac", "sighting--8f21b6ff-91b4-4d90-b043-bd0c77965ca3", "sighting--991a7aad-8f72-4dfe-b35c-9ada942768a3", "sighting--438871ed-d192-41ac-a003-4df8ee553bba", "sighting--f29ca8cb-0a01-42d2-aed9-fd087e5cebd0", "sighting--62eb3444-8616-4de2-a7c8-48f4a9003ae3", "sighting--322fc55e-2b6b-4140-a1a0-4025d5e7e890", "sighting--42a37bb2-ad8c-40c4-9ee7-4881f6e27d5e", "sighting--3a6cf707-e7d9-4082-8149-0327cf39f1d9", "sighting--4ac3970c-f058-4d89-b04b-b3e20d7beca4", "sighting--23823042-4966-46d4-9bb7-cf13c839ba0d", "sighting--75b5ac71-1ad0-4c23-bbb1-618111dc18f5", "sighting--d0e050ff-1d2c-414e-b07a-182d357d8b1e", "sighting--48b4e878-393a-405f-b7e0-75a7747d451d", "sighting--084de7df-177c-4ecc-8f4f-053c56d00bbc", "sighting--10a30052-9e1a-4988-974b-c5be8278bc37", "sighting--8bd2b359-bf62-46a6-85fc-08b3d0cee0d0", "sighting--3f4f2339-20ae-4586-b437-644574a1c7be", "sighting--60018620-3345-48b9-9313-1c09cec715c7", "sighting--aa4cc9fe-70b5-4ceb-ac58-2e81f00bd98c", "sighting--b9479570-3a8f-46d9-bd17-8de61bf5f728", "sighting--71c7ca08-172e-490e-abc7-2bdc2d4d7e1f", "sighting--22bbe451-88be-47fc-b239-c68526a0e23b", "sighting--2231c320-8cfa-4b77-8c97-8b5d0fae8ec7", "sighting--917ec979-37f3-45a4-8a3c-12c8814a3834", "sighting--aa7c54eb-7f4e-4d78-bf90-070b6a4e3c81", "sighting--105fd230-c21c-4eb4-acef-153f83452b7a", "sighting--7d5060ca-7771-42ee-9433-0ab530925f96", "sighting--cab34eb3-befd-4760-9710-9a8fa8c53790", "sighting--7a8199f4-a638-48f0-9f97-dd801546a831", "sighting--9dcb3ab0-8708-4d48-b0f6-41e805c3a7cf", "sighting--2b595fd1-5760-4055-9e76-8a355b830e08", "sighting--010d852f-38ad-423a-9f96-c603526f83d6", "sighting--f7b91e67-2eb3-41ee-9c37-174836c2010e", "sighting--8e707439-3254-427d-a5aa-db61362d93ec", "sighting--08ae3aec-e456-46d3-87f5-7771771bd831", "sighting--dac307b3-720a-4b6a-85f0-61b997fa3deb", "sighting--fc9a6eb9-2e6b-4821-ab9d-32e5b8e2b7c7", "sighting--468eed35-0684-4a90-bf66-d2413a40f7ad", "sighting--c1f4f68f-b40c-4afb-aa19-89879c6fa668", "sighting--ad714e9d-a56d-40f9-8337-9c7cb8cb1e73", "sighting--2dc99c2f-65d7-42ef-bc2f-5181d2c8f5e0", "sighting--3ef9d135-3ccb-4040-95cc-b6ad00cc3c62", "sighting--a6900f29-8f4c-4e97-aae5-5ae7e3166103", "sighting--e2cbac2f-649d-4599-9f24-ab69a683e413", "sighting--1026f175-9883-4ff2-bb67-d831b71d7dec", "sighting--1ddea4c3-6c1f-42ec-b6b0-245cea19afd4", "sighting--5b6e28d2-3bc0-4b7b-a13a-b913349efcfa", "sighting--87ed7d62-52ca-4ac7-a7f1-826b0cf32e2a", "sighting--bb70ed0c-a902-4c10-94e9-85f0b73e325d", "sighting--680e9cee-d83c-4194-92b2-266907bcc95a", "sighting--e8f38705-f2e2-4282-9127-04e9116af695", "sighting--e53d1eb6-1b43-4191-9d92-abfaf0096f1d", "sighting--43b60a36-1ac5-4b0f-97cf-0fd5e2342f77", "sighting--14d4c2f0-0384-4262-97c3-6425a218d4f6", "sighting--890c10b8-4d5b-44d5-abb4-719b4f41e755", "sighting--7b68c6a0-6097-468f-837a-66d3a098f168", "sighting--624c7c6c-f139-4a04-8420-2ef8a8463e5d", "sighting--749c6dfa-3c41-426e-b6ce-8bfec71da4fc", "sighting--b5762dd5-2ed8-4e2d-91c3-73c7fdc2e053", "sighting--ecf84efa-55dd-4e98-86b7-93dbf78c38a9", "sighting--6965d141-a7d9-49c9-9ab1-963e611163ac", "sighting--6860114e-afe2-4be6-93db-7efb3dff9239", "sighting--82523582-d777-4442-a575-ba5719027f20", "sighting--5a0b2c15-7581-4d5f-bdc6-dab9c946d19f", "sighting--afc00ab6-94eb-47f7-abfb-5a95792b7d59", "sighting--36b162c7-4b5f-4d99-b124-7974bd99d4e1", "sighting--a8b0c8a5-b8c9-495d-af5c-b2eb4f5f81f9", "sighting--4653bce6-633b-4240-b7db-8dfd95048947", "sighting--185b8887-5729-4ebd-9085-1220b918fef4", "sighting--c9b71659-4c79-4c4a-9e82-89f4d9e5dcfb", "sighting--1a27f058-69c0-43eb-b10e-983654653570", "sighting--4ceb639c-d7a2-4d3a-92ec-e227a4b27f4e", "sighting--591b33d1-5363-4659-8ba6-c2f9a43d6f29", "sighting--df3d6ad3-b0aa-4fbe-8aa7-1856b500634b", "sighting--1ff72c6f-b0c0-4842-89c2-abda05d1cebe", "sighting--bf7137bc-0a30-4a3a-ac4f-4e94aec0d6a6", "sighting--a17babe8-3bdc-41a7-a834-36f88e3e653d", "sighting--189dce54-13a7-41c1-a2e7-b71baefae649", "sighting--7abe32e3-a7da-4c93-b852-9b312c880ecf", "sighting--22d13851-112e-4ff0-a98e-47f57540e349", "sighting--04ca9440-edf7-4401-875b-3554057723cd", "sighting--8a5d4e0b-04eb-4172-8977-8cf41fea9e72", "sighting--4f37f2cd-084e-4821-9bde-885bce215ade", "sighting--2b8da23f-6163-413e-a669-5a2c8fc372ac", "sighting--51977d7f-2851-4495-8fb0-95261ab1f7f9", "sighting--210406a4-b801-41a4-8ba0-798d1b5a2992", "sighting--00de9537-6cd0-497a-bb94-b371e7808182", "sighting--f5f5b350-1bf8-43c4-a1cb-e95a689a9439", "sighting--2a9507b7-49eb-4378-8df0-a6e45c8f61b4", "sighting--024a383e-2825-4c18-9600-1935d28d3d3d", "sighting--58017f66-56b2-45df-afad-0032a9245f25", "sighting--590320af-df8f-4b77-ae52-2c037fa688c5", "sighting--c21f3a6d-2ba7-42b4-a88c-8daf369b3e85", "sighting--8f71258d-70b9-4115-990e-c6b0e9d11c1e", "sighting--dd326bcf-2c95-45cd-ac9c-938ae1862c46", "sighting--87137e62-3aef-43f9-a382-30fd6445a8bc", "sighting--00ea5326-b3a5-4934-bc4b-a795cee9577d", "sighting--774ced61-412a-47da-88ec-b4fb44cc41db", "sighting--36ce1cc9-b5cd-4732-ad3f-1c076f69eb41", "sighting--120b43b4-e8ed-4734-8f4e-826c3c1dba20", "sighting--5d1e181c-14b0-4687-be4c-d450b800dd74", "sighting--706eb35b-6491-401c-b3eb-9e87f56bb2cc", "sighting--16951d43-2201-488e-99f9-57cbbb7a86d1", "sighting--be01c460-a429-4aa6-a73f-5d348ed3e554", "sighting--19c81ff0-68b3-4b4e-9d9f-5d0690cde22a", "sighting--c18721b2-b08a-4f84-b8be-5f1001cf1053", "sighting--a3c9e56e-834a-4180-985b-402c499aa2ea", "sighting--91bf7cfe-cad2-4ca7-9e31-4887a0f2188d", "sighting--0ff97756-5633-4d05-9ec5-dce5e0a63bed", "sighting--5f70c76b-6f21-48ff-a87f-8cecd88c6491", "sighting--a6ff27d8-0c4b-4fbc-9f31-1ae0e64ed773", "sighting--b9bf7f59-0bec-40c9-b156-32ee831ef19b", "sighting--d374620b-fbc0-4ba6-ad3d-0b4b3a4851e9", "sighting--3d8926eb-8166-41e1-9c2d-b18d90797af0", "sighting--221e4b60-fa4a-4bc4-b3bb-355b57f3e12b", "sighting--eed127c7-ef4a-485f-b9fa-bfd581592ae1", "sighting--0c978a34-6d76-480b-863f-e26cb90ccb21", "sighting--f0c513a3-ad25-4239-b898-f727f13a80ad", "sighting--feef543b-738e-4b54-a4b8-9ace48c8cecc", "sighting--bf96da44-6605-4666-bb33-448bc88104b6", "sighting--cc54e292-5407-4332-bf65-ebf65bb486e6", "sighting--96116635-fa87-49f8-9d78-668e04100255", "sighting--0b034ada-ea9d-4c9e-bd1e-4affb07fb765", "sighting--66028895-6118-401d-a17f-fe0332fc1fd0", "sighting--3c1b575a-542f-4644-a09c-c42a118d323c", "sighting--fa77c871-311b-4971-9b2f-e958d5add527", "sighting--49586603-ddf4-4566-b8fd-10816f81cb65", "sighting--93db7813-2025-4540-9737-19b6595f5f72", "sighting--58656033-065e-4e82-8476-bcf03f3e0144", "sighting--a568085a-9db0-4bac-acb4-37b436bcc15a", "sighting--3e69d49d-6294-458d-8404-44d083e8ac56", "sighting--b43e3e75-1d7f-42c1-a9b0-a19359c57915", "sighting--4d6e0cd0-7a5d-4222-9591-efd1c75376a0", "sighting--10bfb50e-4563-425b-bf1a-b30b91736e2c", "sighting--2fea7fe5-03ca-4501-b491-1d834b78667f", "sighting--a3c52410-fece-4d83-9002-cff3d510c219", "sighting--0e58f2ee-2cae-4232-b800-513b878c482c", "sighting--0bc60690-6874-4f93-bafc-019e1430f1ce", "sighting--d3db381f-35af-40a3-9168-afba21d6cdfd", "sighting--68d1a904-4cae-41c6-894d-5606eb326954", "sighting--05914ef5-522b-4949-9f7b-9e1f74ee23ed", "sighting--a8edfbf8-f32b-4048-b966-86b9d711b8d5", "sighting--7eda4007-cfdf-43c1-8bba-4a920b23c30a", "sighting--4316b37f-f9a2-4137-9b9e-7167773d7c40", "sighting--947ff55c-5ec2-4299-b349-73dcbca347bf", "sighting--a30e2d6d-e9d8-49cf-924d-5e763cc2d42d", "sighting--b4b9f0a6-4ba7-4674-ad07-d8f9b5b04b5c", "sighting--82efc07c-4b7c-488a-beb9-2d86a791d134", "sighting--1e6d2cbf-156f-47f0-a6c3-0ccb6e08fa26", "sighting--5b16eb1f-3bc0-4d36-8d30-f0d035dc485e", "sighting--545179cb-1962-49a3-a9d4-91834f8ba846", "sighting--56f2057f-feb7-4b12-97e9-37bffef1c8be", "sighting--3cc9db26-c072-4046-a2b8-7b54cea57b3a", "sighting--938ecb2f-9f5a-491e-9cf5-1350db732489", "sighting--d5ea1449-d578-40e3-91c5-af9200183248", "sighting--47e56d78-d0be-4c7b-93d9-921088033fdb", "sighting--aa006954-5225-41b5-8c4d-9c3b57d8801b", "sighting--0c1a8f7c-6578-4378-9448-b4b1e7488abb", "sighting--4552426e-e93b-49ad-9f12-79b912ba93f7", "sighting--5ec165fe-9dac-4d4b-8e12-253314707a7b", "sighting--8dcc6b9f-8025-4dc4-bdff-1f7808fe28ad", "sighting--9cacbf44-0316-4fe4-a3ba-449e0d54a0ed", "sighting--28493fc2-c8c5-427b-a25f-dcfe2141210d", "sighting--591f932e-54e6-41e1-ae44-ecfb55ae0cd4", "sighting--4e249d11-f9e1-4f62-8b8f-29b7b731baeb", "sighting--e1a37701-dd51-4646-9035-cf81716d0c77", "sighting--1ae484b2-e5cf-407f-99e2-88da8be25874", "sighting--5675f9a0-f111-4ace-9e44-1297dc84eeee", "sighting--ae468d23-5499-4714-ab26-766f3879c691", "sighting--eec29ef7-1a4a-466f-849e-ba06aa82948a", "sighting--46c6794f-4ce6-4e5d-b9f4-23fbc6d0a449", "sighting--f64e4797-9ff8-4c04-8bc5-4a6f5010cc67", "sighting--e2600f3b-0aa1-4723-be2d-68064c2e587c", "sighting--b162e136-89e8-4b96-a2b3-f9b2a07fba4b", "sighting--ae8baba5-94d6-4eb4-b467-ce7b6d4a541b", "sighting--70675bd3-f8c5-4dcc-8d2f-4bbbc0a49845", "sighting--7d00377b-6ee9-41cf-88db-90fbb394bbc4", "sighting--06d38d87-88fb-4737-bfc7-6d3eacec1b6a", "sighting--9d5be34b-6f31-471b-aed4-74a2a18012ed", "sighting--40bce19b-64dc-466e-bd38-18dda6b1af43", "sighting--e5b1c0ca-4134-41fe-b6ab-f92d4f36a7c5", "sighting--7ac4d9a4-a2e9-47f1-9b86-86a880c93c96", "sighting--e2cef660-9df0-4c09-86c4-0935eea7999b", "sighting--26986a9b-2ad0-4717-9aaf-0cf6b438f012", "sighting--72195a55-839c-4124-ab2d-610657e54537", "sighting--44eade46-9bd7-4153-9bea-ae591b9a3a64", "sighting--47f570ce-7248-4d44-a528-f403accaab77", "sighting--9f3375e3-745f-480b-ada1-a7030d06f69a", "sighting--220a11e6-6a0e-4088-9957-f22f4eb4fa3b", "sighting--80f65efa-49be-4ef3-94b0-2131d1426c98", "sighting--a84c885a-a680-4c2a-8337-0046fc5e170d", "sighting--56ce01df-5e5c-454d-b289-f827b839fd47", "sighting--795be884-79d0-4d62-94e2-4bf55ce2c097", "sighting--cf204d82-69f8-4930-8cfa-c83596dd6f4f", "sighting--8433c9d8-21eb-4e98-9b89-f293bbd95cb1", "sighting--98617b5d-aa94-4cfe-b7a6-8ec1980463b0", "sighting--d19d2a21-f28a-421c-93e9-efbb26332526", "sighting--0d3d91b3-77f8-4f56-a1ed-242c214ae739", "sighting--3ceb1a97-72ff-458a-b116-ca732186c357", "sighting--e3e965a7-0211-4996-ad88-a8c9fd6b7f54", "sighting--bd837936-4c9f-46f3-92a8-a8cded26f93d", "sighting--f670144f-afe7-4d05-ad19-7fcceb8caaf5", "sighting--858589a3-9d0c-403d-9afa-ee2bf9e858b2", "sighting--c8baf502-deb3-44f8-bd82-47d14959a891", "sighting--1c594583-f16a-4b29-b80b-c20f0f9b4d2c", "sighting--ae365ba7-5ce7-4db6-9c48-c9fccd184f34", "sighting--b08091d5-2176-4379-b225-e7209a766349", "sighting--80dfdf0b-431b-4cf3-8362-f750d30354ee", "sighting--d68fa96a-45f1-4016-927c-54c96833d619", "sighting--e816d351-e207-4a34-8ffe-0e5a46538251", "sighting--e159f6d8-4f24-4d21-b38d-307b45559c57", "sighting--a9b82d3b-9453-4792-9a74-bbf4e35b6f31", "sighting--fee01be6-1842-4892-9b0f-c0f1c565407b", "sighting--2fe0f809-e091-4ba3-b560-cbb50cf7f235", "sighting--d832c15c-59c7-40d1-b632-73756e72b728", "sighting--de1facb6-7432-49a4-a1ca-e33ec62ae0eb", "sighting--43129d8d-74be-4eaf-bc4a-76401ecc3517", "sighting--9b13aac6-c623-40e4-9bfa-9cee9322122e", "sighting--42bfbdb9-7113-404e-b5c7-a66fb5acbcd0", "sighting--d7a03448-d211-4ca9-afd2-424fdc7907b6", "sighting--4ea53887-f80e-434d-8599-fbbb1cee8fc2", "sighting--2a0248b6-b5f5-40fa-966e-8518f5e6c6ed", "sighting--edbf240f-c423-48af-aeca-27ec3974f28a", "sighting--b7f442bf-c103-4314-9134-9409e5aef1c1", "sighting--c29c1642-04d9-49d6-b24f-3a10a0fb9f8c", "sighting--d3b42176-d994-4f60-bd2f-0d1ebf271d03", "sighting--d0b6437a-ce54-481e-9031-b6a755f91779", "sighting--b419f60e-ab5c-42d5-8a43-ce59546fcd0e", "sighting--adf5a075-7e39-4b92-82fb-f063136831c0", "sighting--8e7d4b36-a507-4f50-b4fc-53847188e8d1", "sighting--1a83f4a2-1eda-4e85-a0d1-fbf07144a4ae", "sighting--c94ea54b-e118-4b9b-83c6-c49e2152e3d3", "sighting--40bb7fe0-be0c-452b-8705-0bff2aabdb6f", "sighting--0567ed6e-2cf3-4d98-90f0-5d5f4e18da38", "sighting--bbf759f0-01fd-4315-803c-a880d34246c2", "sighting--c0144f23-ed3a-4fe8-bc17-aacd4660e740", "sighting--d11c3b62-5581-4344-8abe-83b5acc9f820", "sighting--306d746a-3dbc-4932-b9f0-eb5763365a74", "sighting--a1cd73ea-3eb0-404a-9d5a-fa8d8192e5a1", "sighting--3fe455c6-8ef4-42fa-a6eb-2beebf0c321f", "sighting--60945545-3365-44c2-9c08-7cf10e88e839", "sighting--e709d972-4444-4fe1-b59e-2142746fc011", "sighting--c81f52c1-7605-43e9-9fa7-911f20ab995a", "sighting--64b63458-014c-4016-81e7-7b2cc6c69c0a", "sighting--5850c1e7-9e5b-4a06-a075-79883d96a357", "sighting--4d403080-f172-4dd5-a661-21d064306ccb", "sighting--e916fc10-881f-4083-9556-f867740b48d2", "sighting--d8a05eb1-5ab8-4c15-b25f-e166a4f84247", "sighting--41b6d140-e29c-44e4-87ba-16e987e4b75b", "sighting--7d8264ee-df54-4f33-8914-0797ed285a30", "sighting--e57aff90-af05-4a40-a67e-ff8f78699d30", "sighting--9c961ebc-6678-4e45-9341-54bbea6f4048", "sighting--998dbefe-3c14-4eb0-b03f-6742a1d021ea", "sighting--749f95bf-84b5-450f-b219-4d98dfbbff45", "sighting--42f08b3d-b7a4-43dd-b543-6bb5d2a5bfcd", "sighting--261dc9a2-c25f-40e3-b3c0-46604a65bec0", "sighting--aa1204fa-e240-4a8f-ae3c-2a40f1074d5f", "sighting--51e20dd4-5b92-4135-a753-f0c4d92b50f8", "sighting--94fa27a0-e54b-4ab7-b2ae-abbd7f1769aa", "sighting--072c7628-d1c5-43e7-b2e7-b29e4f99096d", "sighting--fc45cdf2-acbb-4c06-9e04-9e62219787dd", "sighting--17fcd03a-566a-4fcb-988a-a2e607d10cad", "sighting--f8abadcb-34b6-4b79-b2d0-af064381fb7a", "sighting--c46da958-2d2f-43f8-9209-a340dbfe75ba", "sighting--57f56fb2-f645-4c0c-9381-a5236de09425", "sighting--93ddeb81-2a5a-43c5-b4e5-7f3f5be2c17d", "sighting--924b1c7a-6d2d-47f0-9688-49a1f52a8908", "sighting--afc56e74-ccd0-440a-90be-b147898fdf8b", "sighting--0738eee0-2083-4734-a00d-7fec5c0e8284", "sighting--00f27ffe-0ffb-476b-bdd5-a5b5fb26d467", "sighting--238e2bb5-5bc2-438b-9fcf-a2002d5d57d2", "sighting--aaa1651a-d2a1-4442-92a6-83628bc19954", "sighting--7c2c4c01-74d4-4810-ae37-66a912d2f961", "sighting--514f7fed-b584-46fe-9b78-40bdd0b4f2ca", "sighting--87a6282f-086d-4b75-aadd-c8e80413c136", "sighting--a62e4128-2378-448a-81cd-cb89498498d1", "sighting--65558149-1ba4-42ab-8585-8078fa145a15", "sighting--3b1f0632-9943-4a8f-a771-44412bcce3cc", "sighting--6df46aec-1a83-4994-97d6-362201d88c7b", "sighting--af27298a-5a52-4747-b9ea-b6844e3a92e6", "sighting--f591e888-2c0b-43c6-b23a-d2dec605310d", "sighting--708fb214-8348-4afb-9026-b4ab0b51f2d6", "sighting--81033782-f4db-42bf-beec-21b0bdf3cc4e", "sighting--6110db43-f5a4-4d39-9f13-8a0737f2c6a9", "sighting--a3c7390f-80bb-4e14-bf1c-8103beae4bb5", "sighting--3f605cc4-420b-4e29-822e-2c6033577fa7", "sighting--959b7895-994e-4acb-afe6-b25fe69ad37f", "sighting--cf187b6f-7a4d-4504-908d-c5ecb51f3717", "sighting--7e97acbb-d21f-4bab-a54e-81ffb7d4d8be", "sighting--0dbff92c-592d-442f-a777-c8399d312dd8", "sighting--7a228ad6-709d-42f2-a09b-1483e62da3d5", "sighting--b1e932d2-2b3c-445e-bb00-7126641bb5fb", "sighting--8a142bfc-acc4-4d15-941e-12eb28922723", "sighting--434e03e4-6c7c-4a0c-b4ab-26b7b749c227", "sighting--77db4111-d304-4739-b649-65ee354c6020", "sighting--9dafdda8-ca3a-493e-b9a6-a1b56c3f2cf7", "sighting--5d59e805-2dc1-4c10-a578-fc39bd05412c", "sighting--d54c12ef-ae0b-4ebf-9d1f-3a8523bd5f66", "sighting--a7fd917a-8da4-4ff4-b345-00af592be8aa", "sighting--b8b9fcb6-0246-4e6f-98b3-0f6ed0db437e", "sighting--efc490be-17f2-479b-ad9c-330bb68eb974", "sighting--33b04dd0-5ce7-4414-b740-3ecf2efd80de", "sighting--3d3972b5-774d-4108-a2b1-57e2015b4f39", "sighting--437d9f3e-7f26-4a7d-8b5e-50a1470dfe6f", "sighting--ad9bc0f6-2f13-4318-a566-ac28bda331c3", "sighting--9262ba9b-7f4a-4f2a-bba2-f22a59bd13d4", "sighting--57d120cf-504e-4f53-9504-ca040f6bf559", "sighting--891aeeaa-5e4b-49a1-9c77-0f5433c4a139", "sighting--604c8ec6-817c-4597-8c79-380250a524f1", "sighting--26be18df-8f8a-4346-9150-d2a86298eafa", "sighting--b7f7e1f4-5fe0-4594-ab82-e3f28353614c", "sighting--5dd66560-8ac9-45e4-b057-1466ff62151b", "sighting--b8136758-c12e-4373-b19f-1086c57f27e7", "sighting--3abe60eb-9b0d-4784-b99e-a23797e2426b", "sighting--00947321-56ea-40ff-92e6-67b6dbb53e46", "sighting--d631d76c-a9d6-4193-9a9f-f474e728c2e9", "sighting--f8b9c3d5-1fd0-4ced-9b83-4eaa76ae65e7", "sighting--2f63763b-6bf8-472f-bd16-df57c85d09cc", "sighting--ada67d13-b437-431d-9527-c8461b7894c4", "sighting--2e351bb6-4590-4dcb-880a-3f1cf7f8ee26", "sighting--0b83fb94-d68c-44e6-82f0-34b0e7869d39", "sighting--edef9178-07a4-457b-8577-bdf572e7542c", "sighting--b411a080-f47b-4aa4-a77d-2800f230da6a", "sighting--bbf62a85-01cf-49fd-ba5e-cf15860083a2", "sighting--a11f04a4-d25f-4b2e-b3c4-f3a1767c6084", "sighting--0534dc34-3a36-403f-a460-46aa1a110439", "sighting--2e96dd03-464e-4a0f-af06-3e5a01b21ce8", "sighting--ea3b6569-ecd3-4d20-98cb-e6d59f130de2", "sighting--a0cf17db-c8cc-4d5a-a87c-bdf6ab619f4a", "sighting--6493bd6b-f5fb-4066-8d67-f01888529b59", "sighting--ab751f39-f29c-45ea-af47-015d8a771d70", "sighting--00e35217-00cc-41ee-a83a-feeff8962d87", "sighting--2ce72964-2aa2-47cb-a4e5-4230ddeb5b61", "sighting--7ddb20a3-2d5a-49e3-aaf5-0a1832cd6bf9", "sighting--8a51ffa2-79ac-4da9-bc35-1cfc0e09cf34", "sighting--95b1a230-a4b0-4084-84d4-1654fea0a9ec", "sighting--7bc94f0e-13c2-49cd-8d25-78c45c4ba88b", "sighting--88c24155-4eda-4fdb-9d6b-a2aef95ab264", "sighting--2c87e7d6-2a1a-4a00-8f71-106fdf204991", "sighting--f788cbdd-700a-4dc1-a728-08fa3089b3b8", "sighting--92b7c195-24a5-42f9-812f-8f176389a964", "sighting--04f24a63-c355-4381-8918-e5eefe781e9c", "sighting--2931c1df-6200-43f5-9742-8f02479ad6b1", "sighting--cea21bc6-2cb9-4e95-a4c9-d56fd6a46957", "sighting--2938cd69-f7fb-4c94-9a51-d12a9e2b2a22", "sighting--9c5d198e-074c-4a46-879f-0ef594857873", "sighting--1ef2ffc3-9277-457a-bb35-0b9c6592a889", "sighting--8da6ff6b-3935-4235-933c-5e9aeaf22714", "sighting--db4befe3-9930-436a-b4d1-522174058b0b", "sighting--7db8aa1a-604c-463f-8ad1-0c0d4ddecb2b", "sighting--1048472b-04f2-49aa-9c72-c990f8e522a1", "sighting--bb3810ba-6a1e-4fd7-967b-3eeb2720a193", "sighting--6e957f91-c1a3-4e60-9a06-50d9c12fc39f", "sighting--3aa28b25-5c54-46db-989c-c83ad19fccd3", "sighting--3ad93721-241b-4e60-a8f0-8c16cfa76ee0", "sighting--19739a59-16ef-4aa7-ba87-0162225d9bd7", "sighting--c9bd5a88-3142-486a-8abe-f921f992c0c2", "sighting--a765af1b-b047-482a-8577-316434332d64", "sighting--d484f7af-2442-4ef3-ac14-f12f33cf1576", "sighting--f62526ae-4f8a-415a-bada-cfa5e55afc80", "sighting--4e494cbf-9fa0-4f15-82b1-b12edcc83fda", "sighting--0d25a031-88fa-4cd8-b8a3-d71942db0742", "sighting--26951573-7103-48c8-abe0-5d0f41e88822", "sighting--b8409413-fe2a-40c5-8226-82129fd702e2", "sighting--70d6a907-b335-4015-9b6d-709c8cfe2dd0", "sighting--654eff11-de2b-4e3c-8ad6-530e225a0215", "sighting--bdb87dde-aaf4-445e-aa29-78a9d28575ba", "sighting--91198ac8-914a-4501-b22e-3d41ef272478", "sighting--a7235a5c-fde0-4ac7-8d0f-f014fab32e1f", "sighting--072cc77c-fa37-48eb-aa91-f327c76e9a5e", "sighting--cd6874a8-d9bd-4be4-9002-8f2fa5c412ad", "sighting--76479c3d-8b6b-44fc-92cc-7c89d6e23aa6", "sighting--65ea6dd7-f644-4d02-a083-95e067e30b20", "sighting--98c5a2a9-cd1f-4410-bc66-4edbfbb3ed65", "sighting--08bded76-f9bf-42b5-aa71-034439d53a51", "sighting--ef44d09e-7a35-41a6-bec1-bb246e8f0131", "sighting--9f4ffd5d-8b6b-4df2-abff-2285893ee1f6", "sighting--23e1b0d8-ec20-488b-9407-738b58e09d9d", "sighting--26a1038b-8a63-4a64-b088-f5873b41d594", "sighting--78776254-4a10-4592-83b5-bb9be3eeffe3", "sighting--1ea2f3a2-8e55-4dfd-848b-c48a39f3e1a8", "sighting--53e36da3-eee6-49ee-b4d4-3dcae7a744e2", "sighting--af4a0bf4-f64d-41f2-8569-be564e12ecf3", "sighting--4f18ffeb-28e2-4b47-b54e-c147e4935c89", "sighting--81ef701a-8edd-4817-b9aa-ae80d3080bea", "sighting--5db3a08c-0256-4dbb-bb21-adac2bd20ae4", "sighting--ded53144-6558-4c11-9244-a206fb54b69b", "sighting--8ed81132-15d1-4e28-9000-4f3ee5f36939", "sighting--d5950637-c29d-466a-9103-ddbbbd680a0a", "sighting--36a1eb35-cd9a-4f75-bd73-f743fb5e671f", "sighting--2444f5dc-45c4-461b-953d-f92a7e164899", "sighting--f30f86f7-ff9e-4e1d-a85c-f4df37c5b46e", "sighting--511ddae5-ae00-4420-8989-330354992575", "sighting--e3e51511-ea2d-48c5-ae94-d6c5a84ef671", "sighting--7ecaa44d-9517-4988-896d-083cdc1e53cd", "sighting--98be9722-dbe8-4b9b-9a3d-792d75b6a70c", "sighting--891dc130-7904-4f12-8a8e-6a62d38dceef", "sighting--fad66010-fc8c-4873-bb96-3d5a62d4d0ac", "sighting--5bb1be40-37f5-4257-b5dc-b4ec14c24f62", "sighting--0880c3e5-d7a0-4bfd-ade5-00a68134333d", "sighting--1d7f5410-e399-458e-8b2d-bccf5878d633", "sighting--fabccdcb-a77a-469a-b225-fe79cea8832c", "sighting--d33d2bb0-d78f-41a4-8e6e-7688c420c69f", "sighting--3077845b-8cf9-4524-a1c1-ba94fc92d128", "sighting--4f2f44a7-26d5-4255-824a-59ef5565cc04", "sighting--10cb7453-ee84-498b-bf1e-6630cec7ad3c", "sighting--19a067d0-940b-41d6-a35a-3c83e10c0d4b", "sighting--5a3b617e-1eff-4edb-bf3c-c9d78be52e40", "sighting--0928df45-f61a-4cfb-980b-13d082a44085", "sighting--d0bc046c-d9a3-4257-8535-4e12a8cbe3ca", "sighting--0c4faa2d-4c46-4849-8e0c-98642dcf4b80", "sighting--65ef770f-15fb-4828-9763-42fe37f71ebf", "sighting--4a9e65c8-a607-40df-9aee-d4dce4f5b76f", "sighting--f2d99bb9-0163-4ea9-a79f-2b0466b31175", "sighting--4802a561-adeb-4176-9aff-be1adc9dda95", "sighting--c55812fb-f32c-4382-8b8d-e27da1611f88", "sighting--3b448a98-bf04-4e86-b399-a4702b51d33e", "sighting--03b6e239-9311-4057-8d89-78447d3c966d", "sighting--5acdfc26-e7b3-44d1-a191-0e79266c7202", "sighting--fe80fe51-abe1-47cf-937a-1bad94d2b674", "sighting--e29bbe25-f9c9-4079-9eed-e9f05c37b8ab", "sighting--8dd7429d-e47d-4721-b497-0cbcfb810e19", "sighting--ac5a3628-4b75-440f-a22b-acf04163cb7f", "sighting--f4554621-4f3e-4759-a5cc-3c92f0cfbc23", "sighting--507e5054-f9d1-4b75-b153-51a2db6e1670", "sighting--397e4771-65c6-417d-bddc-beea8b8e3835", "sighting--e64f94de-7507-4f83-b3f3-704d7380acf0", "sighting--3ae57993-396b-4fb3-8776-74f1fe293dbd", "sighting--92c74f3c-b9ad-49d8-b2e2-1d5f0be0c284", "sighting--60f5adcd-0726-4264-a0a3-90fbb88ed476", "sighting--950e71ef-f442-4426-88bf-218d651fa492", "sighting--677f1abb-e89d-42f6-a901-53a9fa0332c0", "sighting--a2ec9c8b-990b-416e-a4f3-f4feb28a2410", "sighting--6abc73d9-a5d2-428a-b000-0aa5371a446b", "sighting--e8a3e233-53df-4281-9b76-9956c44ce389", "sighting--0b3cf941-72e9-4fef-af17-ea8d4c927cd4", "sighting--322b20ca-0401-41fb-b52a-143677e55cb4", "sighting--53d1fdb8-1d35-4558-91cc-5a2ed8ef67ac", "sighting--63f393b0-9d9b-4376-909d-167f0c02794b", "sighting--48444939-d76b-4f7a-8c41-5552b027a411", "sighting--1d4cbabf-9d7b-4216-aeb7-cf666a241b46", "sighting--76baff51-1584-44e8-aa76-0576532eced7", "sighting--30d97188-a409-4937-b676-458d5f3183cb", "sighting--c04b48a1-90c4-474b-9f11-c8b3aa779305", "sighting--d54aa190-9019-415c-afe5-9074e9a91b0d", "sighting--5bef8544-5a82-48eb-ba2c-2057a62041e2", "sighting--d18ac946-60f7-41a2-9435-e2045d0110b3", "sighting--a5bf5d6f-6d6f-4211-8e1a-0eb467ab47a7", "sighting--71637a05-1d42-45ec-9979-6b9aa67b4078", "sighting--9b8b6b75-8c04-41c3-817f-fd94d99f4afa", "sighting--b0766abf-31ae-4d29-a8b9-6893e1d269a0", "sighting--68cae5d0-5683-4388-a3a9-ff8138f68942", "sighting--09fe18b4-2187-4527-9a1a-f0bf76355bff", "sighting--458013cc-eecd-45eb-93bd-2f1cbb3d8c7a", "sighting--8b0711df-d36a-49fb-ab1a-267363a22125", "sighting--abf9ce61-37cd-4ed6-ab6e-e2e4ad9d1e2c", "sighting--52d9e05d-9346-4c73-a084-c01fbf378003", "sighting--cf79cc40-bf2b-4cb9-95c3-161f3554149f", "sighting--c0e9ff86-907a-48a8-8c56-564b467bdc15", "sighting--b6327099-52a8-4a64-b230-73adaa36f392", "sighting--df9d9ba3-0f15-4c7f-a0a6-4cfe7a272a1b", "sighting--d19bd4bb-32a3-4bfa-9b5b-a719aadad5b5", "sighting--3c4ceafc-992f-475e-bb1f-a978de8e3826", "sighting--55ec2955-2eed-4661-9713-25478bf0f0e7", "sighting--aff20736-3b98-4ec6-8057-7624347777cd", "sighting--43c2b35c-a0e3-45db-b70d-ff541b8632aa", "sighting--e2158e98-a63e-4e9f-8cdc-bdc76a3a5eab", "sighting--40db1aa4-3eba-47dd-8687-64e23a7414b6", "sighting--95ab7bed-ba1d-4b63-8620-1a11d7e6889e", "sighting--2fd9b4ee-ac5e-44e6-a7f4-2c3f9af07e62", "sighting--ec4dfb0f-75cf-442d-89da-62b1487f867d", "sighting--e4f3f05f-a183-4f56-b75a-f99b7e34c6c1", "sighting--82144db5-0849-4594-a7e6-d13d3e936d89", "sighting--e69d909b-f83a-4829-897e-da19bfae0a58", "sighting--d179005f-ffab-4f8f-8da8-b021f8451df6", "sighting--7f8360a8-e5d0-45c7-bec6-54f96bae762d", "sighting--491bd919-8f5c-44bc-a24b-62d21cc46cee", "sighting--cb7f9669-79b6-4788-8b6d-ab821d385203", "sighting--911f6e18-24d7-4ade-8161-81cbb6044eb7", "sighting--b0f40c83-db3e-4838-a747-097e18058b11", "sighting--7691ad6a-871b-4736-8ca0-b6f6e89dce67", "sighting--a6d8a43a-df25-4cac-a145-ca84e604317c", "sighting--f95f9d45-704a-48b9-bbab-bf0bbe04e89c", "sighting--ae29ebb6-9829-4124-8482-9b50cbf724df", "sighting--3a1350d2-f2cf-4723-ba6c-8b66c4c40fd7", "sighting--f564a60a-c881-462f-baae-6afeaeefa195", "sighting--d7df8af5-2b85-41d5-b349-26ee6d434bd1", "sighting--6ded65fd-dce6-42b3-b977-c82058dec865", "sighting--2559f24c-e6df-4b4b-9c06-2a92d061e182", "sighting--65632616-44f5-4239-95f7-01d3b847c313", "sighting--f78cf166-20a5-4ac8-a985-bed38abef4f5", "sighting--9ac231e7-56e3-455b-809f-60df031f3a8b", "sighting--1d002a03-f20b-48ed-895b-76cece98134c", "sighting--1abf08ad-fcac-4b3f-9b23-cc412fa65619", "sighting--ea61b7a4-99ff-4bd1-bda1-0e50c8e93b8b", "sighting--7d4fbe20-9c54-43b5-9af4-4bb84ede1175", "sighting--05978d26-b269-4862-8a28-59d6ed1ba558", "sighting--6cc764be-bf11-433f-993d-d42cab6ba887", "sighting--dc4aced8-f4cc-4409-851f-ceff801c95a2", "sighting--c74f3d88-418e-44dd-9533-11c3ab06f9a1", "sighting--d8b7c2df-3d0a-432d-b2c2-c98434989afa", "sighting--e99f96c3-24ee-4c92-9185-0367b1fa0b5f", "sighting--f5d20a2c-4ccb-4551-b319-bd55f5b44e41", "sighting--8cf727e3-6a10-41e9-8ffa-f186e0ffb960", "sighting--0b469ab4-7387-4709-8f64-b9d5e09c7a7c", "sighting--b845ea97-70d9-4140-b5b0-e20e8a6943d8", "sighting--c68deb58-5f28-45b5-bd28-adcd143d6370", "sighting--b99f0bd3-62e7-4adb-bc63-0e84e70e8207", "sighting--c8143eb6-847c-449e-a909-338bc731d10e", "sighting--9ad42fe0-ab14-4e7f-8e42-2ac4ec44cf5c", "sighting--8e829646-b2c4-4a64-a2c0-7fb7623ad7b8", "sighting--d1411539-e079-4b40-b776-6d63032f195b", "sighting--c51f978e-0345-4493-8887-cd6668d58e92", "sighting--da9d0f5b-d47c-4423-86a4-c79e29449049", "sighting--f6b4ea73-9acc-4a2a-bfe0-49812f22deaf", "sighting--fac687c0-ff95-4239-9ca8-bab4ca8b820a", "sighting--ef3a8af9-ac68-4b7e-9107-b329061e8c09", "sighting--c012695e-9187-4768-879d-5a720c8caea2", "sighting--617b062b-8050-4e66-b575-c97f7804be24", "sighting--9e48ad9a-755d-4ea9-a564-69fb13dec796", "sighting--fb5cbc16-4bfc-454e-9b6c-d507bf34616b", "sighting--3a729b18-e612-4236-a08f-cd21f0a347a7", "sighting--1e03510a-7005-4278-8dee-551db4d3aeb4", "sighting--d2b0ffc8-76b5-4306-856e-6a084056bb1b", "sighting--3f95986e-9efc-4901-a7d4-66b47a86ecd3", "sighting--75ea5866-5aac-430a-888e-69a8748d4a7d", "sighting--71c90c9a-ae88-4cf6-8d7a-951490db4bb9", "sighting--fd8ffa67-69ac-4212-a717-2281c6321e85", "sighting--46589694-3f41-44a2-8276-f0705281ae47", "sighting--855db76b-8a23-40e5-86d2-5fdf0bc2cd4a", "sighting--85b1f76e-0028-4572-b8dc-a9b2deb696cd", "sighting--85d8bff3-3770-4bbf-b086-ac5bd78c60ad", "sighting--b578b965-525d-4677-9b40-853c3b1e5aeb", "sighting--c5ec7e1a-cfcc-49e9-a149-695c02bb0959", "sighting--b118f02b-13eb-4497-9e8e-298640974a77", "sighting--3f7a631a-f18e-4ac4-a5d7-a50a39ce1802", "sighting--212a411f-e38f-4add-8d38-3863a53b44b9", "sighting--4fd38a25-606f-4c9b-a448-7d06c6ec1a34", "sighting--4999a783-c01e-4920-94d8-80efb77a488c", "sighting--8d47cc1d-315f-4573-8c14-f1bd0469a986", "sighting--3aea52fd-91cf-47c6-ae19-cb7968846c68", "sighting--f2404900-c8ff-4e2d-bf00-72e48cf373f1", "sighting--466e27c2-6040-4289-999a-b6e30e67c431", "sighting--c7cb6132-f65a-4fe9-9d4c-09c3f0fd3b14", "sighting--3d74386a-4aff-4ee6-a165-80874aba1da6", "sighting--abdcecf5-5b96-4816-8534-f1cf6f7d41a4", "sighting--9232f4d0-9a69-41d9-8461-f1325ec6b88b", "sighting--b0197031-9126-4f5f-b80d-f23553a3d260", "sighting--8d94952e-dd0e-4eb9-801a-bdf341728f76", "sighting--1ea14ce1-dc99-4009-a876-0e159efa1233", "sighting--d72c6346-6959-4bf0-8cdf-9cda5650e7f9", "sighting--040a0a88-7e4f-4b8b-81bc-957740d1140a", "sighting--f81f3e5f-904f-49eb-b19e-6f198ccd871d", "sighting--29a00c5a-3357-4f31-b3e8-ce6b1164b342", "sighting--47f6946e-fca1-4df5-9cc7-b2f5dca13dd7", "sighting--a27b479a-bdce-4a3c-98f9-7c6cd021c9b2", "sighting--1bb15649-f09f-4926-8345-7e5abb09e27e", "sighting--b1690a48-547b-4307-89f6-6dd439562078", "sighting--bea13547-06d7-468d-b8e6-59acdb17246e", "sighting--11091497-5033-4b9b-a149-1f87dc8eb91e", "sighting--cbf606dd-4aeb-432f-9c3e-bba967e20a92", "sighting--0cefa307-f568-4b7e-9127-07850bcde9b7", "sighting--a79dbc9e-580e-4861-9af8-7d5aecf1c92c", "sighting--df82a355-50eb-447b-b69f-02013eebbe91", "sighting--29dbedac-e75f-47e8-bcf0-f2fa1ae54720", "sighting--c97b1546-3e11-433e-8e58-06c0b29b69ca", "sighting--936a2f8f-dd15-47a1-8a77-711f942dcc86", "sighting--cfbb4bc0-0d0e-4090-aa3a-c819bcaac1a2", "sighting--6c38ca28-6f36-4866-a631-280f2b28c6a0", "sighting--209062fa-689e-4fde-8cc5-cc3ee812e3e7", "sighting--a5dccacd-b0f0-4e58-9534-2ff33f53086e", "sighting--8b9ade53-178b-44c3-8af1-c6c61fcb4adf", "sighting--c99e9330-de70-4583-a695-cd74e02b9bf1", "sighting--0b0d3e5c-427e-4478-9ceb-1e2f24967b45", "sighting--6e8b1695-b8e7-4ed2-822d-bfb0e07650b4", "sighting--a2c83c67-13de-43c8-99bc-073d92b5e88e", "sighting--b77819b1-94de-4622-bed8-2620723c09e2", "sighting--37fc1a39-3c74-411b-b385-e7169b7dce7a", "sighting--b032a62e-2928-4ffc-81a2-6f6ee9e55603", "sighting--765033ed-0e5b-4be3-8c9d-f49d2b7b199b", "sighting--3e9c116b-beca-4d4b-8b79-4d8276ae1201", "sighting--01058a74-de3f-418e-86ad-256d5d398490", "sighting--504faeeb-49c5-4daa-88f1-e2b25e08b162", "sighting--46480b93-4906-46a7-b580-0eeaeddc3292", "sighting--b623a89f-4fa7-4054-b65d-281551c2d869", "sighting--4b2695e4-da1a-491a-a28e-1ed56ec22b3d", "sighting--5deae904-6c54-45d6-ac24-f08ccb041273", "sighting--aeba80fa-c651-41ca-95c1-c4a413e6f615", "sighting--d54367cf-379c-4b8b-b593-0435b8dfccbd", "sighting--067ab21f-cb42-4960-bb46-100e73460be1", "sighting--91dd956c-dd52-4b2f-902f-65fcb84f6433", "sighting--f52bf425-8933-4727-9ca7-194a3f105060", "sighting--99b08ce4-737d-4706-a3f5-5fb90000eee3", "sighting--8d41c96a-c654-4fc6-be10-c5c49d857ef8", "sighting--d6ceec60-3990-44f7-add4-ced5e596c5d1", "sighting--6cb86433-7170-44f3-9fb6-9c246179b704", "sighting--2c8743ab-1ade-440e-8b7c-c494e04829dd", "sighting--f0c4dde8-42d8-4574-97b8-9452f183ac8c", "sighting--1c86b58f-4a1c-43f0-b9c6-a61c6abf9697", "sighting--ce3de1a2-83ad-44a0-87be-d0f2a35d3714", "sighting--9e853f96-708c-4511-94b2-3f49f9f74c0b", "sighting--c59f051d-e4a8-4fd1-b20f-69ec70a68b55", "sighting--ed9b961c-0fd5-4b77-aeb3-ccf1655a8648", "sighting--090c72b1-76af-4635-b28e-59033cf7d9f3", "sighting--77e625d8-d8b3-41d9-95fa-b604fbebf2c0", "sighting--2f829185-13d3-4143-a1ac-7b37fd2be250", "sighting--40058e0b-3b39-4d83-82b1-25a342c2b5a1", "sighting--6112e706-180f-4e51-bc65-895aedc9fd27", "sighting--de7e2d6e-d8a3-49b5-a312-6799dcee50bc", "sighting--72770c86-0f5b-4d21-a050-cf04db865a7a", "sighting--25ebfb49-a6d0-4c98-802e-810582ed3974", "sighting--de76bc97-6429-4d7f-839c-37c09e5f6f05", "sighting--56b74bbc-0d86-4d02-ad9e-8d9881ad11b5", "sighting--f7aa73d3-0ee4-48a1-b598-d36a5fe297a1", "sighting--acad508e-e974-49fe-a986-6f74ffc58fa8", "sighting--0b89df85-6de9-4180-a0c2-8533c985b212", "sighting--e92ab81e-271e-47fc-9e3d-82d852936248", "sighting--5bf4d045-c5d7-4dd6-a8ef-3b47cd45d340", "sighting--90264283-efe3-42a8-8e66-705dca72c602", "sighting--e4004d9b-a45c-43a7-9c08-ca9a4caaf1b0", "sighting--45dbb438-7bda-4bd2-b218-5d340cbbac23", "sighting--f4cefb6f-e11d-41f7-9f19-a9e888c22c4d", "sighting--bd277462-a56f-4745-9ef6-46e72269c50d", "sighting--c1d55046-2ac0-4bc6-8b55-5c1d6538d89f", "sighting--ea039be0-655d-4932-8c36-eb36c236a8a1", "sighting--33c76de2-9d31-4ba5-9122-b3b780c977e8", "sighting--7a0153c9-b192-409e-9fa4-d51394dd6b2b", "sighting--79939cb8-b435-4f54-9ebc-1bf73cbb493e", "sighting--802b645f-d69b-4565-a4b5-d4d0e5f3699b", "sighting--494c59d1-edf2-4d95-90fb-fd9960b10448", "sighting--35af2b47-491c-4281-a588-ed2c715b8db5", "sighting--22cd28c9-eb0f-4f5f-9a4f-c49ff54cc317", "sighting--733c01d6-2ad9-40a7-836e-27fa29db5d25", "sighting--878db211-d1c6-4c3a-9ea0-2899cd5e4704", "sighting--a043ab18-6653-4c6a-8fe3-c3caea03d634", "sighting--0fd7cedf-e994-472c-b4cd-095eb6035d3c", "sighting--4b461d15-fb38-4fd2-848f-2c016481df5c", "sighting--8443583e-8f1d-401d-a00e-69fbe0eabfdd", "sighting--3ae4c347-9f72-4e76-8dc1-2b76283206c8", "sighting--d4a71446-92ad-4512-8a48-92eb68bd582e", "sighting--82c603a4-c267-46c9-a14c-a71d0517bfdc", "sighting--5e78136f-e9cf-4814-ac7a-df066c4eb9e4", "sighting--63881654-d7e6-4a12-92db-8f2726af26e2", "sighting--e853eb08-3988-4829-b69d-78c86c5ba7ea", "sighting--02c2b711-c770-48b8-a932-4354c463bb9c", "sighting--9ff436e7-04c6-42ec-8ffa-b17a96ee0123", "sighting--6d8b49ba-6b0f-4f93-ab20-51982fd5e601", "sighting--8e3af68b-8226-4f87-9caa-8ca5482dad2a", "sighting--65c7ff53-d647-429b-a761-cb6b7d1ce0d3", "sighting--85bc653f-e5df-4180-b33c-4fdd1503eb11", "sighting--26985f11-d58a-49f2-9f97-f4fb0e5a3d8e", "sighting--7873781a-d977-47c7-a7e7-221b0392d426", "sighting--4fc0158a-af63-489e-8a3f-07024a56e537", "sighting--521af0e7-1883-43b9-9834-5534b61184c8", "sighting--86347c71-33f9-418e-a382-5ac9923c523a", "sighting--beecb99e-802e-475d-9afa-ab7f35830f50", "sighting--a0526d04-d0e2-4a83-84db-50af1af95430", "sighting--b0185eb7-01d6-4b13-b995-34f02d63833b", "sighting--aa972bfc-bd83-4036-9bc8-f07a28357649", "sighting--b8e2173c-12ca-4553-a1b6-d7f709618420", "sighting--e1b7ae2a-b0e6-4333-be01-9001f0dfc46f", "sighting--7eb63695-0f31-4900-9d5d-c1ec08b0c784", "sighting--d5fb7f0e-c385-4198-a0d3-0eebc6eb24d2", "sighting--55aafbc9-cae6-49ad-b5f1-9d241e7f877d", "sighting--ca496a3c-006c-4b58-844c-8d50ec7d9b36", "sighting--76cbe8fe-3877-4525-87a9-5deac0b8110c", "sighting--cc76cc90-ced8-4223-b6ab-68af201d22f0", "sighting--10d08df1-99db-4b2c-a600-4782187d9ce8", "sighting--4cc14cae-440d-4db0-8fbf-3c1e39af9896", "sighting--41eeede5-f5c9-4515-a33a-2f31c97dac39", "sighting--5ba3195b-a90d-43c7-a7ab-03d163676578", "sighting--509460c3-1fc3-4d88-b7c4-978a95a71a49", "sighting--d51f0543-c161-4557-9bbb-c7a90da7190e", "sighting--f1fdd280-0422-4385-b249-c5114eeb448b", "sighting--d7585da3-a1ac-48b3-8997-8b55bc69919d", "sighting--6ea3f78c-6f69-4237-bea8-2b3548ed8572", "sighting--7f6de010-2a40-4018-a406-45a1134c38fd", "sighting--79abc030-2b8f-47a4-843f-d8b0b12ceab2", "sighting--421ccd8f-297a-4d2c-8ffe-9649dc4a2df1", "sighting--24050cb6-5153-49e7-9d5b-7ff9791d5431", "sighting--aa0c13b8-96c7-40a8-bf9f-21d104e1f245", "sighting--1c76f24d-d3a8-40e0-b9c3-f5e7515e8b29", "sighting--6ea9e9fa-78f2-493c-8344-e5c4726b9ef4", "sighting--f9ce611e-a3ea-4caa-a79a-25d1415eedd7", "sighting--a594a797-8f0c-4c33-a3cc-4857c9590f8c", "sighting--395d221e-abe0-414c-8345-dd01250bb1d3", "sighting--ec91d597-50ea-485e-9e92-1fa32f502289", "sighting--90136dae-e345-4406-9604-76961a3c7683", "sighting--86f3a5ab-c84b-4a8f-a7f1-f6994fe43ad6", "sighting--26e3f933-b512-42d6-921e-63484f7a672b", "sighting--dae066e5-6ea8-469e-a514-72357a77cd9c", "sighting--32a39d24-d2bc-41ee-969d-d37a22d998c8", "sighting--9515cf22-f790-483b-9aa1-c606fca25c37", "sighting--17da55fb-f07b-4153-a09c-95ba0099ac14", "sighting--cec77fc9-3b9a-42d8-99fa-985e624dad52", "sighting--61b16ea6-cc39-40cc-b995-f529f9d49438", "sighting--54b5d1ae-e29b-473f-ab03-b42b1813ef29", "sighting--6c4d39cc-cbb4-41ad-a27e-ada09617e2c3", "sighting--378c9791-f31e-4316-8324-08137da770eb", "sighting--5eedb32b-dc88-47a1-af08-e43863101c8d", "sighting--4b2f895f-20d5-461b-8573-c9e94c06a83d", "sighting--4491700f-000e-42ef-b5a8-872691e6911c", "sighting--5014fd4b-b7cc-4155-baf3-a2d31b465982", "sighting--267938a1-fe8e-4555-ad08-247765bb9843", "sighting--28d707b5-cc3f-46ed-ae2b-5958ff357ddd", "sighting--5e3f5c9f-a44d-49e4-8927-dafa4a566d0e", "sighting--85396ab5-4e83-42a8-a874-d0aa76a0eea3", "sighting--7926a1c8-6681-4d24-953b-1c08e8ffd7c4", "sighting--13c5e4d4-98a2-498a-9587-ecdda2b70f07", "sighting--f91c075b-b090-4bfd-9e2e-b77c5a8067c7", "sighting--0a810789-8c34-424e-abdb-fc3011c46c54", "sighting--90cfd388-d321-45fc-bf5b-d777f8510f49", "sighting--6e530f1b-b245-474c-9a4c-4ea29a88ffc7", "sighting--ce29b164-34d5-4e03-a04c-0bddec57795d", "sighting--d979257e-9a50-4df7-9dba-0082c26f9e73", "sighting--651802cf-5910-4d2d-acfe-76726de1d5a8", "sighting--88eb84d7-fb2e-42d5-8e9f-fb320104385e", "sighting--f8c811be-1dd9-45e7-9a7d-640978abe56a", "sighting--4a819894-857f-426d-8bce-a4723a8cc19d", "sighting--3b2aa815-ef51-47a0-b9ce-73e45ae0963d", "sighting--6bb2affe-5b37-4f4d-b73c-e4f57881bee4", "sighting--9d3721f2-26ce-4dac-b272-0dae0b03ffe9", "sighting--0f9a1f0c-def9-4a58-b80b-d2b57b16285d", "sighting--f4116f7b-a627-4f61-bb3b-d6da8a4e4315", "sighting--bf1934ff-ce1f-40ca-b163-55ce3d514b00", "sighting--b540162f-ee1d-438a-872f-5387b97e549c", "sighting--8ad09bcc-9864-4818-90fc-88f40227013d", "sighting--beeaaedd-d4d3-4ee9-a872-2f960bac2fcf", "sighting--db7ba1e4-08e4-4202-a9b3-8539650d2772", "sighting--b74a9c68-ca93-4c31-bd50-479af0457885", "sighting--09cb9540-91de-4a5f-89ec-319c3cd52b7d", "sighting--977b51c2-e683-4d91-a0a3-3b8f4987e74b", "sighting--cea319e8-01fa-4ede-a2f1-6a04111dd82c", "sighting--24b0a051-e317-4ed9-86f4-2b4201476139", "sighting--c1bbce54-ba44-4aa8-a414-be3d04e93f67", "sighting--675a9560-17ee-45c6-b79b-f970d46f3865", "sighting--e40580be-deab-4ed6-807d-1f02cf569fe2", "sighting--da4f063c-4781-408a-b799-973279bc56ff", "sighting--35f5e210-18e5-465f-b0ba-186caabde7eb", "sighting--c5ed11bd-0bfe-4707-a28f-147add31ef45", "sighting--f89ee4fa-85e4-4a14-b78f-e748aa2bcf4b", "sighting--4aefe5d3-82ab-4e94-bade-9ea7f693fc02", "sighting--ee7d5460-dc74-4ee7-a8b7-d69cc6ecc30c", "sighting--06fe442a-82a8-49a0-9386-81676ee0f40b", "sighting--66c2acea-d391-4a23-94d3-c497fa18727e", "sighting--ce5c4a92-28da-4c64-a9dd-d6a70ccc94e8", "sighting--135b49e4-8724-4602-b03c-8e4e8e8fdb47", "sighting--f0670143-a8ea-4644-83f8-7799ed3ba7a2", "sighting--dd2e7654-a1b2-4a02-b85b-3fff9f5cdff3", "sighting--f966c3ec-610b-40eb-ac7a-8bd365c7c446", "sighting--40e7c7fd-f75e-43ee-95b9-8a9ec45f7f02", "sighting--6c504747-5f9f-4576-8996-7dd2cd48e178", "sighting--5867653f-1ac7-4a91-975d-3b4362ec82e9", "sighting--59a35110-5669-4b2f-ac5e-8472a8947cd4", "sighting--8e85aa1c-03c8-480a-9542-a777a9a6260c", "sighting--ac122174-06ea-4261-9f62-f812ef72125d", "sighting--b4ad7a1c-37a2-4b12-aa45-a6210cef0210", "sighting--b8247eef-25d4-491b-90b6-f6bb1d91e8c6", "sighting--df139439-d791-4bbc-88bb-05ec173b6693", "sighting--5d50944f-1171-4d78-b4cb-1686799c6a09", "sighting--3be18546-e7d9-4461-8db9-9600e977ab2b", "sighting--4988f709-a51a-4bd8-b4ce-b6898a12243a", "sighting--21367971-916e-4552-8284-c7cda4f1c2b5", "sighting--6bfbccb4-67ec-41d8-bed3-85c557b412cf", "sighting--f3ff457a-1a2f-4ce0-bce6-ed73b60e1f98", "sighting--6882e67b-98a4-41c5-96a0-4f73a1e3af92", "sighting--9eaec719-af7c-4002-8f37-af24d5cc374c", "sighting--967ce804-3d07-44c1-80db-669a5144326e", "sighting--c778a1bd-6502-4039-a896-6297fa3bebcd", "sighting--415cfdac-e515-48be-b049-f6e31c2d3049", "sighting--4efb9940-d2b2-4ba4-b8d3-057e0551828d", "sighting--ad3de8d1-3109-4860-b19a-94d1158d7f1c", "sighting--c70dd5f1-1d99-4c87-9f75-4593d902d8f2", "sighting--f4f4e5cf-d68d-4367-a61c-c0b81954ea88", "sighting--315db6db-b04a-416d-956f-9301606de562", "sighting--6990a7b5-756a-4de5-ab50-82b7610c2939", "sighting--ae10200e-35a9-414f-b364-8e15a6c789d2", "sighting--30f34554-5ac1-4eff-9f86-654ee303d016", "sighting--80313bcc-ba03-464f-9fa4-5df2d20cc696", "sighting--110b1079-ce1b-408f-9733-cfc34541b4be", "sighting--a0435992-7985-4327-92eb-888fe1c5d131", "sighting--029e9a56-d0de-4e02-8f49-e422cfaa44a3", "sighting--75a885c3-32dc-4413-ba69-bd854c5432b7", "sighting--dc47809f-9eda-42d6-bc94-d046e36d0c3a", "sighting--56ab6764-dfb6-40f9-8118-167ef2a64aad", "sighting--c61d87de-2338-4315-b6e4-0adb2145dc84", "sighting--4dfef410-93cd-4114-b969-5c5c736b31b5", "sighting--e99fbce7-10cb-4a07-80bb-b7e3cb4a1e6c", "sighting--abc87c8b-ada9-4826-9d63-8e8326ebbbea", "sighting--03937939-d2ad-4040-8746-47db52be6050", "sighting--168d32f3-3666-4c38-90cf-404a8d9ff58b", "sighting--6643eb82-e8dc-4a29-ae81-954ac20c90b6", "sighting--028fba36-b9a6-4b03-be22-833bc5c016d9", "sighting--a39b32a1-61bf-41fc-aa42-6125bcf0face", "sighting--00da5b4a-fbe5-44b0-be1e-7f445be9bb6c", "sighting--7d69bd06-7d19-4673-89eb-e7a5ea9917cb", "sighting--1f75b271-84ec-4592-8d91-c60ffc958f84", "sighting--d7c97b5c-2d0f-47bf-91da-6854ce1dd668", "sighting--0897ed4d-09d8-48fc-a591-8a95b4562709", "sighting--7057b9ce-0d10-47e1-9d95-2947b88e510b", "sighting--2941a7a6-ba04-4e2d-b5f2-aa44adef3e06", "sighting--4c55a804-27b1-4000-9e0e-13ce3dcd0bff", "sighting--820a4bb6-f284-4e9c-9e1f-3b59defe749e", "sighting--f2da552d-21da-45d3-b0a6-0a9d0e5c2a5d", "sighting--3b6674f9-dcd4-4927-9d14-03974ecf7fc3", "sighting--efe5bb5b-5db0-4074-95d9-68b754215375", "sighting--4876562d-4020-44f4-98b0-c417616ab1f8", "sighting--674b9f83-ae08-439b-bb56-d6d3235eb6dc", "sighting--97ab4a40-289b-4a0d-b780-9d53ce34102e", "sighting--5eaf2850-af82-47cc-a72a-59528fa9f6bc", "sighting--40c8ae3a-0ea5-45a8-8af0-cde329934af6", "sighting--5b3f83f6-534f-4b4a-aa72-cfd91a47df55", "sighting--f70eeafc-51be-4522-9b89-9f60fd8c286b", "sighting--ff3b3c8b-1e9b-4b28-9a0c-228accbf00ce", "sighting--9db911f4-28f0-4a5f-9a97-f40d43888674", "sighting--ba4dd3a3-5720-47e1-90eb-57cd08b9f9fd", "sighting--1da882c7-31be-4aae-8fa9-526ac10e5198", "sighting--31dfa335-52c5-4823-ae5c-2c08eadc6604", "sighting--13db5ca5-5b4f-4a39-943a-b8bf6a13e1d0", "sighting--c01538b3-fa24-464a-b0db-11e9ea18267b", "sighting--8a791ba0-5f4a-42d6-a273-aa34e2ea9510", "sighting--12b75635-c8d7-45da-a803-2ce49bc404d5", "sighting--098ac787-e227-4b4f-bccf-216e09752fc3", "sighting--87fb5b2f-0281-4a75-a46e-04e46808d43a", "sighting--15981f21-8a8f-469b-996a-9a972ee12b0b", "sighting--007f61ba-3621-431d-a557-2c805fb3cd16", "sighting--5b3f3cbc-8e46-40a3-af98-18c7419629e4", "sighting--9bc240e3-9a10-4b73-837a-3ceb4ac38382", "sighting--68eb0207-a802-452e-b434-1a028dcb80c8", "sighting--2a7b59af-da1e-47e9-aac1-f5d0b8dd35f8", "sighting--516117a6-b7de-4519-882f-98c2f63959ce", "sighting--4139d963-9224-4ed3-a6b3-cc59181be427", "sighting--867a67d3-19a8-4b99-b7bb-aaf7e75e73f4", "sighting--9b467024-f3f1-40a0-8248-ce4d2110afc7", "sighting--e58284a6-cb79-4fe4-9a9d-16d27c4b227f", "sighting--a6475f5d-2bbd-439b-a79b-1fb14655fb2a", "sighting--9edc0ba5-2588-44ff-9659-5b0f13abe633", "sighting--9cbb0188-e1a6-4891-a811-3e115b9691a9", "sighting--67ee153b-7694-41b7-9b06-360386f0a871", "sighting--bd2c1d7a-96e5-43ff-8f1a-e22deead2ac2", "sighting--2cf094f8-c03d-4340-bb12-9d050486154c", "sighting--6f9c7cce-23ee-45a8-b9b0-84b0b9ce4946", "sighting--c17cc8ce-c2f6-4d20-9b6d-8b7f776f259c", "sighting--47e50bc6-6c31-42c2-8af2-4d73ee18e7cb", "sighting--47041bb1-dd2a-494b-a028-e1b6cfe63ad3", "sighting--2434920a-c7a1-4a8f-99b1-adb10cc9ecb9", "sighting--395ac54b-9c9d-4ad2-9078-f035849f6a2f", "sighting--481624c8-40dd-4b7c-8dae-084a4d7f549b", "sighting--75241c92-5a0f-40be-9ec3-5d66131b828d", "sighting--6a4a483a-e6db-4b55-9830-4f9c2590e560", "sighting--e2ae3fec-8786-402a-b8ef-16c824071310", "sighting--3087b4fd-7be1-47d2-9739-92c3c38b6a3b", "sighting--93b03024-b948-4e3f-b3a4-b5c3c29d984e", "sighting--aa65efa2-e495-4734-8876-3fab17f1b5f7", "sighting--551aac4a-29e6-4012-ba07-44329113f066", "sighting--1bdb3f8a-52d6-413f-9372-50624166d37c", "sighting--4c8dc345-6765-4e7d-b0d6-6b980cac9f3e", "sighting--85cb1d7c-32cc-4c3e-9e30-dd0458dd3892", "sighting--c5b4e621-5c21-43dc-b6fb-846f2aa7bf5b", "sighting--a8e24802-b0b2-493c-bb92-ec1ebe59e63e", "sighting--a0b09478-b340-41af-a84e-635b838fb7f6", "sighting--9be21c1d-1376-44ae-896b-8e4e80f99013", "sighting--cd6d6121-f3eb-4478-bd4a-b4012e2dc5fd", "sighting--055e8f15-8cda-449b-830d-8f640bf71052", "sighting--54221812-18cc-4840-834c-76e1d716994d", "sighting--f2d7132c-5c43-4d90-a9b8-e42cee4a3235", "sighting--b20b56d3-7662-446c-bf47-823dab8398c8", "sighting--3025fdc8-be83-435a-a576-4633f32dd644", "sighting--b9a78936-1c5b-46ec-a04f-af3fb4edad6e", "sighting--7f45c1da-8e55-4ab2-8037-12fbeb3736ae", "sighting--45c14dc8-c1e5-482a-9e1a-18d5a87769a0", "sighting--279d9353-77c6-493e-b105-a6d276b45965", "sighting--f96f67e9-7aaf-4cd1-8c69-48cb0bd0eb62", "sighting--3abdb916-c003-4a70-8815-b0f22667d6e1", "sighting--5bf60cf7-b16c-48f0-a242-8dc235d6b231", "sighting--d29d5b51-3a21-426f-a512-b0da50c32e4b", "sighting--cb782b35-f5cf-4c16-8258-5333be3ded02", "sighting--9e2a28b6-c094-4613-b458-6e46d0f6eb88", "sighting--113448b1-40f2-4582-89d5-804aeb225373", "sighting--237f8e12-38d5-4b7c-9561-c2abce2d2c38", "sighting--fe1c2302-7f49-4818-9b94-471bfc7bcbe2", "sighting--ddd901ae-3d98-418a-9c0e-2d82efcd2e7b", "sighting--06171fd7-5eeb-4460-85e5-bf1785688507", "sighting--a23b1193-1acd-4e66-ae4c-3e28939ef0f4", "sighting--2fe7a7d9-cf50-45a7-90eb-663b387ae555", "sighting--e48a12a8-6939-4f9f-a9d3-9626129d6cfc", "sighting--c3554a4d-9f2f-455a-8954-3b75a018024f", "sighting--ba8e0ac2-8a36-49eb-8caf-e7f0d9fbf829", "sighting--8018dd46-f6d6-46ef-8a08-43042bca091b", "sighting--dc93bf57-5afd-4e4b-be8a-8ecc6a705027", "sighting--19c96872-60b7-4a12-9319-7237d3ef8968", "sighting--323f0daa-429c-425b-b963-7b96c78ef280", "sighting--1c637f94-a76d-4002-bdb6-3c5eabc425cc", "sighting--0b1dfa91-8b4d-4c4e-8e6f-21a36fb268ab", "sighting--d20dcbb3-9ad3-4731-a039-f170e0128857", "sighting--ca3f42b4-58da-4c9f-af58-c786bc238d04", "sighting--dc2a5765-189d-4493-b4c4-3d4a3f76ecf3", "sighting--76bbbd0a-3649-44f4-a007-d9a6b4991041", "sighting--3ab81ceb-fd7d-4d76-b96a-a1758a7b70c7", "sighting--3690bf9d-830f-434e-8be6-ba06838caf5e", "sighting--cf00a230-68bc-429b-b550-502f23470ab9", "sighting--e5b554cd-41e2-4d00-bb14-f41a26364c91", "sighting--d5599765-b7dc-4257-a164-821e1c1f72b1", "sighting--2bea6f63-3218-4776-80f1-1659b7ba2d6a", "sighting--b7c69bef-b47d-4bd8-b8cd-486497193122", "sighting--ed2453ac-6484-47ee-85ae-a2d5b22a71a7", "sighting--3fa976f3-31cd-4690-8a11-726411565877", "sighting--820dfdcc-322e-4bc5-be32-10a2b8f62475", "sighting--3b1e4725-b6b8-455f-aa06-ffb5d78caebc", "sighting--bbca0fa7-651f-448c-8952-d8438b4b42b4", "sighting--ea6810c9-ed7e-4852-b9c0-7f3c296c37c3", "sighting--5a6f6420-79b7-4b4f-a61a-d40c1e0e6447", "sighting--5145fe34-a57b-4333-a72a-604087ee6a45", "sighting--ca9590e9-aec5-4600-8399-67118fc9d176", "sighting--03710b8a-5bb8-4432-ada6-c0fa7b8bc1a2", "sighting--260a8567-d4d7-4b92-83b2-4576a5964bfa", "sighting--5445fd93-f1a2-4a42-b9b8-369a84e814f0", "sighting--0f6f6cfc-4768-471b-9f4a-ab10aef0b6d9", "sighting--639b7381-e88f-42be-9c8a-ad60ad2477a3", "sighting--900cfb8e-6078-451c-a838-345e10b3ea3b", "sighting--71a4a0be-b86a-4530-8f6e-27ad09ef2728", "sighting--849586ff-a850-4e5c-bacb-d670b6717855", "sighting--751f8b36-d870-432b-962b-cecee1e0eb72", "sighting--f7f57060-69b5-420c-a9b4-ef685cf767bc", "sighting--e32011a1-78f0-4e9d-82ca-2030db5d137b", "sighting--24e3c26f-2516-4e3b-814b-5ab8c848679d", "sighting--0accdd1e-a43e-4d22-9e0d-aad618deff61", "sighting--3278cbc1-defa-4e39-98d0-05c8838a6288", "sighting--135a2279-8132-4b58-9e9a-4e3bc6619608", "sighting--8239fb2c-f194-46a6-a254-0e10d015448c", "sighting--1c9643b1-9978-43a0-9581-bd987f9d1c7d", "sighting--9f3d00a1-531f-481e-937c-ddadeda513a1", "sighting--13455aa6-503f-4bbd-a24d-188daadeb0d5", "sighting--25c65f54-4643-4abb-a986-5542ed55c503", "sighting--d7dc5924-35a8-4a30-98ad-68e9f103273d", "sighting--90bdb4a9-2aef-408f-bb19-e1edf036a4dc", "sighting--48cf7c24-6ff9-4498-9970-98a04a958cdb", "sighting--1a22c0a8-dcb2-4068-a80e-4bda8c0fd690", "sighting--287b36f2-92e1-42f1-a2fc-098a90d5bde7", "sighting--32fb113d-e375-4f56-bbb3-08cddf139257", "sighting--fb90a396-ac0b-4dbe-9680-e5b615d6eee8", "sighting--4825bb1b-654c-4ca3-bcfc-745ca7e6685f", "sighting--b192152d-0e0d-495c-9725-5b80c9c8e49f", "sighting--f1d23c23-b7e7-4624-a5f4-a5f9d598b93f", "sighting--27be913d-1b15-4d26-8044-90fab95b3128", "sighting--c57e9e7f-7cab-4619-9dba-1a842113fa97", "sighting--6dbda619-6b4d-4ee7-912d-fa35081012cc", "sighting--87860313-7caf-4eff-b0c8-8c07a3277371", "sighting--6e077773-da41-4d16-b75b-d74196cc5804", "sighting--8ce352d7-cb18-4a0e-9413-473f9d43102b", "sighting--9feb4bd7-d0e8-4ca1-87ea-97d05eb13ad6", "sighting--7eb80e2b-493c-435c-beff-db209371a8e5", "sighting--71963117-8be6-4403-8858-efd2f9fc73d9", "sighting--c731286c-1ead-4d23-9e45-5b0939f4b2f3", "sighting--492e2d46-5a97-4405-8027-78c4a858016c", "sighting--b93cd8c6-e4a6-4ce1-87c1-c748eb693cd4", "sighting--c82cca76-539f-45ce-b65d-4b17ce5b3133", "sighting--0f5e7631-fd26-402b-a48b-97c52f67e2d6", "sighting--21f5220d-7b84-4ff9-b3c0-9b558d2c5128", "sighting--61687a55-30d7-4809-ae6c-a6a8aba9df3d", "sighting--5b545cd5-993a-4cdc-af62-2610ba95e1c1", "sighting--a6c245bb-3ca4-4b8b-891f-9c4c98cda759", "sighting--76b25042-97ff-4ab2-825a-ba811621f0d3", "sighting--afe11b3b-1f2b-41a8-9d42-597a14330dcd", "sighting--6766700c-a653-40d5-9a6e-72c5b1a2f36d", "sighting--7fdc35e4-766d-4cf9-827d-2910e76833d6", "sighting--ff990107-65a1-4b95-9bf4-b60f5645e418", "sighting--00982436-7b74-4189-8f0a-db9ba143eec8", "sighting--bdc47182-64bb-4c83-ab0d-05d1a59d0ba6", "sighting--d44a08ad-fe34-48a0-9447-9923aa8d4458", "sighting--1c8adf91-6638-4a7a-a045-380f120c8298", "sighting--f7b56f8e-1fe2-4df9-b957-45e1aebafe71", "sighting--919adeb0-d071-48b3-a854-62cadcb1c0e1", "sighting--517b167f-b7a8-4069-b88f-309e72d4208b", "sighting--3481fb65-0cf5-42bf-aaf2-734285b1e3ae", "sighting--f2d0709f-abc0-4082-9fe2-0a3753753d6d", "sighting--65ed82a9-15df-4901-918c-6d19f03c03f9", "sighting--fdda98e6-4acc-4729-91f5-da4755268668", "sighting--16b07093-4280-4b13-8f94-57caa6c3cd45", "sighting--5ddad4c1-a73d-4f71-909b-3bfaee4518cd", "sighting--1c7e5ca3-af26-4bae-8197-69f68d453cce", "sighting--afba0cd5-6be2-4aeb-824e-3b92dfd7f5f7", "sighting--6743a598-7730-44d5-87fd-aeeb7d5799ec", "sighting--03e23bb1-ad25-4eb4-9662-420b0dec3115", "sighting--381386bb-2b3c-4756-87df-d0b6266f9f55", "sighting--ef1573b1-5399-47f0-9f96-25de08b1a93c", "sighting--4d68b987-edfe-4064-8501-84c3b8dc0ae0", "sighting--13c4135b-9f11-4b0d-9d43-d3c5f616ce6c", "sighting--c1ef1d66-6f70-40a0-ba7c-57db44df1e5a", "sighting--142c9248-f4d0-4035-a665-a315152e676d", "sighting--a3d5755e-a88a-49e4-a8f6-d3a0621fba19", "sighting--e191d596-775d-4afc-bae7-ebdef378f2b0", "sighting--f8fdc296-53b3-4fef-b08a-aebe1944ac7a", "sighting--99220eef-c875-437e-8b99-cd63f1360971", "sighting--38320e5c-cb51-4bca-8bda-dc3d58250113", "sighting--af96e765-e006-4c5f-be44-96db9fd7432e", "sighting--045ee0a0-f494-4bbb-8942-14d847b5d6ce", "sighting--e896dee6-f03e-4aac-a98e-b16a3c9836f5", "sighting--1695dd3d-04c5-4930-86a6-b28d0e1851f5", "sighting--61e20db2-e759-4aa1-858d-7c4182f9141b", "sighting--f28bd88a-ad31-44d5-8a88-091c23239f4b", "sighting--000be2bf-7942-46c8-ab32-b8082eb44a60", "sighting--e2e01aaa-ddad-4f08-8c6e-47f48a99f3ab", "sighting--0303279d-081f-46a3-9127-4dbd65585a15", "sighting--0295aff0-c716-4ff5-aa94-57c7ffbb0e11", "sighting--5b5a26ce-ce14-46c7-b10f-1895e6c9a851", "sighting--d2dc11c4-f692-4aa1-b10e-87a58b1be404", "sighting--eb2de2e8-6026-48e6-bd43-eebcb1d0db87", "sighting--bc650e78-73a6-4434-90eb-2fd0630b4d1d", "sighting--a621d6e3-2060-49aa-b0aa-0e1e657571b7", "sighting--4e3863c0-6a69-4df1-8a55-dc5a65121874", "sighting--c6dabb66-2664-4735-b003-1b907f3f871d", "sighting--c4ed3171-c67d-48ea-8c83-673f6082b602", "sighting--fe073123-5580-4456-ac87-53cb21b58b74", "sighting--9278a5f2-7076-4049-ac1e-104e5493e36f", "sighting--d20bd659-d9b3-4ec8-89e7-371605fbb635", "sighting--8631e9cd-b41b-452a-a07e-98c9d4431e35", "sighting--70591b0c-9061-4679-be94-45776bd98140", "sighting--d46c70b3-dea0-409c-aa38-6b2de7df2b92", "sighting--4149172f-1a94-4e80-bed6-a115b3880d87", "sighting--4e24a79f-a688-4a1b-8d91-a709805490a8", "sighting--9f6d252d-ba02-4921-b488-e553f1c162ac", "sighting--344ff10a-f766-455a-b949-83209cf99bd1", "sighting--bb3ad68b-e95b-492a-8f57-c6643e7b06d5", "sighting--4eb141a9-798f-4273-bbef-69033b5d8498", "sighting--234a07ad-b3a2-4a72-8074-412a9a14d51f", "sighting--aa0eb828-80f0-4f79-9537-14e0da72686f", "sighting--bdcd2f3d-44cf-42b4-8a7e-4ae5c57759f6", "sighting--a8ef4bfa-e59b-4897-97e8-918b5704e193", "sighting--abebfece-e48e-460e-b237-45e36cad344f", "sighting--388be162-9649-4452-96a7-823d27b904c1", "sighting--32a09ca5-842d-40ff-a92d-c8092e2992a2", "sighting--0f9e96b5-ea8c-40d2-99e5-1fa57657ee40", "sighting--3b6463c9-6dcb-48bb-aeb6-dfb14ee5d56f", "sighting--6b443553-3392-488d-9b4b-15c1aaefc12e", "sighting--140168b6-7851-4702-a73c-87911e654213", "sighting--db62cc06-63de-487a-86c7-36c407f9d9d3", "sighting--3a597edb-5159-4813-a1f5-3be68ed48500", "sighting--49434d9b-eba0-4bb7-bf6b-3bdd3d62aa3f", "sighting--0bb6fce2-dfec-4cfc-a018-2c7a52a47d41", "sighting--d492f2a3-8425-41dd-9c8c-37bbf5d83e9e", "sighting--9bc26dc4-1323-4fbb-8b71-9178456fc50a", "sighting--e0f21ec3-f24d-43ff-85c1-c8b5a75fce99", "sighting--83cd5aa8-6b8e-4209-b092-844b903abd52", "sighting--756bcd83-d388-4eb3-b5a1-26aad45da5ec", "sighting--1b69dc84-d8c4-4d50-adb6-0b639bd1d2d9", "sighting--e1c65122-103d-4346-8b47-e17211d3fdbc", "sighting--2a132760-ba44-402e-814b-db48d43f27af", "sighting--6ebf9fe1-bb76-4c5d-9012-a2f27e8b0ccf", "sighting--ad795dfb-9ee6-4959-bdc1-a88b1f1c472c", "sighting--2d0103ac-e115-44f8-a97d-5fdb43880be1", "sighting--86e094ca-9997-4c91-ac0b-86df7faea733", "sighting--05b6761a-77d8-4718-8f26-c862f73a122f", "sighting--e7c1c8dd-1ca7-42f7-ae83-18336adfc3f4", "sighting--69e6729b-7c80-4a6c-9e2b-bdff8089657f", "sighting--c2ca07cb-79dd-49b5-bd6a-809144f478a1", "sighting--7f179fed-24a7-4a84-b14f-1aec8a961ab3", "sighting--c60257f6-3721-4219-9556-f51a9905200e", "sighting--4a2c521c-c844-456e-adf5-bf23ce99fe35", "sighting--be574edc-3506-407c-a525-d4ecffbf82f8", "sighting--5cac7b28-8572-4612-84f9-12d2b6a9f287", "sighting--69db2e84-1ac4-4fc6-a7cb-04dbda81cc02", "sighting--e0c772fa-9bd9-4731-b8f8-d2a741f45f19", "sighting--136f2f1b-387b-4521-af5d-b47d7556006f", "sighting--1427ee41-05bd-409c-b6aa-0db603550ed6", "sighting--7b03019f-f646-411c-9d3d-a6c54699c0a0", "sighting--e45b9e9f-3607-493b-8020-655f658e8da0", "sighting--d05be3de-88e1-4b78-aef9-aad2177ef182", "sighting--647045d7-b7a9-41ec-a7f2-ea30749d9fcc", "sighting--dd4cabc5-6a1f-4c23-b374-5f5166b96fc5", "sighting--cd3f7b10-80d2-447f-b8ec-dd330553cd4f", "sighting--fcdb1210-2c19-484d-b0da-f0712f05d9b4", "sighting--cc3db83a-481d-4c03-a26e-7051a5be7df4", "sighting--57814ffe-5443-4b13-be82-d6dbd832fda4", "sighting--1f50e4df-71f1-4d3e-b95c-5747954d9d82", "sighting--7234f498-05e9-456c-9a8d-db0f486c7675", "sighting--85c24e0d-273d-45e8-bf5f-f45071e9274e", "sighting--d931399a-69b9-4332-b670-7d367661ffd1", "sighting--f1c92535-551b-48f5-96a4-980536fe2848", "sighting--43986079-4a09-4a84-9b56-03340fa900c2", "sighting--d14871a9-10b7-44c6-8eaa-6f72bfa77b44", "sighting--b069fa6e-4c06-4782-b1ba-ad8d8cc6703b", "sighting--ca75fc5b-f258-4e1f-b43f-043d95eb8af9", "sighting--52321367-1420-457b-90ea-4f42e69f5283", "sighting--1ea8cfdf-4c7f-41c2-8840-c56b0983fcaa", "sighting--6e479c8b-591b-490c-a9ca-63de7b75432b", "sighting--0444dff3-b478-4497-a35a-0a34493f4442", "sighting--a14651b1-32fa-418c-9dba-c43627e5673e", "sighting--35d0557b-2618-416e-be83-6a791b45ce94", "sighting--bee8a0df-058f-4c14-b805-fe819a6a879a", "sighting--456336a8-0a33-446f-8968-da9fb51de807", "sighting--7d796e6a-c371-4171-a9e3-fd13191ea580", "sighting--72a814ab-eef4-4f15-8a10-1bac4c64f76e", "sighting--90015437-22a5-4146-9d7a-662275bd92d9", "sighting--5c917879-1c0a-4a3d-9b8f-f222ad1eb618", "sighting--e78e5030-c179-433d-a0ca-c4d257804ef5", "sighting--64cb0cda-ca3c-4f02-8d56-4e07f7b92375", "sighting--d81b8d0e-1ca6-4450-86d9-bbb7020530ca", "sighting--da174540-4257-4796-bdb0-55f9865f5d11", "sighting--c6b97632-544d-4521-bf26-62b4241d0c1b", "sighting--cdda8351-f01a-4aab-ad8c-decd669a5487", "sighting--a832d555-bb32-4b2b-894a-76e2d5aa148e", "sighting--c6fe4355-2823-4fea-98dc-24afc6381f6d", "sighting--9aa6c2d4-8d6e-497d-b67c-ab1edd83c608", "sighting--a0954022-b2da-4112-b1d0-6d373fff8754", "sighting--b5c65a33-4c67-4cc0-8089-2b0765bc3fbd", "sighting--0948babc-10ef-4968-974c-aa6e186e5348", "sighting--3ca83ac0-25fe-4309-8c90-4f7e19e7042b", "sighting--91538e8c-9b38-4418-a0ff-2abcd5fe0f78", "sighting--08edb49f-fbcf-4316-a264-f108ba6c35af", "sighting--30c8d643-1228-41eb-b4b8-3d68958d07ce", "sighting--5aa5631a-67c1-4427-b73b-7d82df59b797", "sighting--38834586-ee7e-47e8-88f7-413df1d09273", "sighting--fecf9fe9-24d9-4121-8da3-5b844d6ee40d", "sighting--1da17c91-1381-4753-8be7-5aa5f59c06ef", "sighting--80a499f6-f831-4daf-9dac-ca1a9b23fa87", "sighting--b58bb85c-da22-4ce8-83c6-1c4369765ec1", "sighting--91047997-39ee-43af-b9bb-618dd1dc259a", "sighting--a112a3af-4179-482d-80f4-0eee446d761f", "sighting--889bda3d-34d4-4654-b9d1-2e3c6d6d2e20", "sighting--30e0e073-18da-4d9f-9d32-b6ca4b0d7663", "sighting--5e370581-91fa-4669-b50e-63afdcb6fb7b", "sighting--8c76e724-835e-4e2f-b9d3-a77b298b3a86", "sighting--dbdccca6-10c1-4d16-85f4-91dc268f0f29", "sighting--ac933a9c-e94b-4532-bd9c-0db911ae43f8", "sighting--fac7f90a-4ff4-42f5-b290-2b7058c602b8", "sighting--2a670a73-5552-4d0f-986d-2cb6485ad241", "sighting--0b958e94-3d65-48c6-838f-9bc26b0acf4d", "sighting--942852f0-d816-4d4f-ac1d-9cf5d375f574", "sighting--38c27db2-7030-4712-a113-8ec3dd6ba51e", "sighting--f33c0573-f278-409f-9deb-809b6aa54209", "sighting--0e25b28b-74d1-44ca-8421-d4b47b465102", "sighting--3266e658-ea94-4896-b419-86c2bd79b2fd", "sighting--5aae26dc-7015-421e-adb3-a8fca9d4eb58", "sighting--0aeaeeb8-c677-45e3-b27d-dec8b731b0cb", "sighting--aea6370b-bece-46e7-bc59-21dcdefb8670", "sighting--423ea22a-e426-4301-a1ea-488ac71daf35", "sighting--752d1b2d-bc7f-4430-9a43-1e3f4fc812d0", "sighting--72372287-86ca-4ad1-a5bd-31dc78e511ee", "sighting--b969b732-8601-4a9c-a034-116aa581996c", "sighting--e90eaec1-5e2e-4b9e-b61a-af4a8e0d754d", "sighting--f18868b3-3730-43b3-89e2-0654dc902f9d", "sighting--a0e48331-3d23-4c07-b926-25dd54d9e273", "sighting--88e15834-05fc-4c07-9ecd-690e87bee606", "sighting--cc9af1ec-be15-4686-8879-11111d1f5bdf", "sighting--9ce93f98-abb9-4bc4-99d2-30f33ed62a62", "sighting--ef7f0e34-1300-4dba-85e9-648cf23a091e", "sighting--eed8a3f2-915d-4350-8684-bb432a23917c", "sighting--5c11bfa0-d1ed-4c35-a2d7-e78e0b2ccacf", "sighting--4298296a-19f7-450d-b18b-a9dda2ce2e54", "sighting--7986ed02-277a-4c37-8b0a-5fc22c2e7360", "sighting--cbb71831-e55c-4930-9a39-89fd2d5394c7", "sighting--0f499ec7-ac29-4512-ba88-b9376cf8de1c", "sighting--585ff887-712d-411a-b451-dc91831789ee", "sighting--552f2e8c-5aa0-4519-b10e-3f33de018ef9", "sighting--71bac162-74f3-4b88-89d4-3e6ac04f7c37", "sighting--f7309ef0-d3ed-4245-b168-ebdd561517c7", "sighting--b7d527a7-02b7-425b-b7e4-079b09109eed", "sighting--efcd2ca3-38fe-43cf-b963-b1b979b7b0ff", "sighting--cecb2b0d-4017-40d2-8a7e-b88a619a7278", "sighting--e95a5641-742b-41e7-9d19-d600d04d3feb", "sighting--cabb7126-3e48-4cea-96df-1fbdf1db9ce4", "sighting--356dd65b-aecb-4aca-8fdb-198928fe7fd7", "sighting--33286f9f-9c55-4e6e-b7da-6e70a8dcbe8a", "sighting--f36b4568-316b-40ca-bc43-4e177600ed65", "sighting--1a138f08-d293-40fd-8ad6-afb648b48636", "sighting--405eedc0-38c9-4cea-869b-0e17c8a2fa87", "sighting--01fab190-66dc-495b-ac43-e0eec5f080d3", "sighting--a6462b86-ea4e-4f6e-a406-88c8a3a20697", "sighting--99f2100a-a2a1-4678-a1a9-6b2d256e421d", "sighting--f648441f-db95-4100-a344-fdc0ad884399", "sighting--f5d5c7fa-8679-4eaa-87c6-9f5f15041526", "sighting--da26ce00-93be-46c2-b978-af261518e49c", "sighting--bd8f8101-bb46-4481-b5fc-ce73be398887", "sighting--7e1ac774-55c3-421c-90b1-11a7073b0bd7", "sighting--72a23bb8-a5e0-4f48-aeb5-b47a28899a9f", "sighting--ddff299b-e792-44d5-b073-f693877bdfd2", "sighting--a704a7f6-ed67-4eb6-81db-63f84a27a8ff", "sighting--16131e6d-df92-49d5-ae43-191ba27b28e7", "sighting--f2b530ad-9ffb-44e1-8f25-85b31c76c9e9", "sighting--fdb507a9-e573-41d4-ab1d-bf51ad3dabc0", "sighting--78629e48-c6c7-4507-a103-9c20e363cbad", "sighting--58126541-9241-4343-9509-a26616de78ae", "sighting--c81857ba-6916-4b82-8f57-91f1b14d70f6", "sighting--ac39213f-8825-4403-a3b7-003c72f36575", "sighting--4b645aea-b371-4e44-8707-55b5c16f412a", "sighting--3333dfcf-7ad9-4b84-badf-47e467a57a9f", "sighting--8cc27326-0936-442c-bb4d-1b8db14736de", "sighting--14ae9fc2-b229-42cd-b56c-c774556f7dc8", "sighting--a7ac4e1a-0774-4532-8667-bdee39240be8", "sighting--c6b2babd-e7bf-4f7d-8633-f294e9b79e1f", "sighting--6acf242f-3f22-4834-b494-dd058de82f5a", "sighting--97270b8c-ae3b-4c3c-9910-277aca6d0182", "sighting--3d3fd298-dde6-460a-a5c2-e776e4249a93", "sighting--f2bedcab-5458-4781-af01-fb55827a29fa", "sighting--39d9168c-d964-4e96-ad89-3a2916e2c743", "sighting--989d771d-52e2-452d-a837-b0be48fa20f6", "sighting--890ae94c-797d-4c23-8171-e38b0874da4c", "sighting--e89dea27-9f80-4e51-8322-8a1ceb5506e8", "sighting--97576375-ffb9-4cbf-a3a8-cb390e218dd0", "sighting--a29d5fff-f87f-4e4a-b3ae-582096e5239c", "sighting--fccfdfd2-7eb2-4abc-a01a-437f39aa50dc", "sighting--37d2e7d6-aac4-4e24-bddd-e55ea333a339", "sighting--92b8221d-b6b1-4c27-a393-0a294955c671", "sighting--be5ddf1c-6294-41ac-b304-934cb58d972e", "sighting--7e1856a1-324b-4dd9-be48-2318f1cc82cc", "sighting--cf2c60fb-2d6f-4e27-92ff-eed5bf239c62", "sighting--0768244d-8e16-48bd-953f-4184d7f71c84", "sighting--a270b6b5-c09b-4693-bce2-9fcd29ee652f", "sighting--1ce5e9a6-8098-4659-b25f-8d1a0e88d84c", "sighting--1c4c0754-5a62-44f1-a522-51f106538c14", "sighting--93f84544-85c8-4e89-bf10-0a17c0cb3e27", "sighting--ca6dad29-07dd-40ee-86f1-7a224d256cf7", "sighting--777dbb6d-5992-4d83-a97b-7cbf1784d7f7", "sighting--105dc869-6de3-403d-aaed-380ca9f66a88", "sighting--d357e715-14fe-47c6-8ac3-4a19c7c34c86", "sighting--9e265e55-3ee4-41d2-977e-58297fbc18a8", "sighting--66a291bf-c22c-408f-9612-ca5919bc3970", "sighting--54d18d0f-22ec-401c-a084-40f6a7636017", "sighting--02079130-52b4-4289-ad56-f41db9b7ee59", "sighting--3dab071a-dd79-43d8-a297-b26c86741b7d", "sighting--cc60a32a-aaa2-4ce5-95bd-d090a76e6499", "sighting--1cd4c0ad-f898-485e-a9e4-89af8b5e78c7", "sighting--aa85e6e7-a101-4dc3-b34a-0a73cea4bead", "sighting--e3075468-abe9-43be-8936-2245735843d9", "sighting--c548df7e-061b-4094-8431-c2d8025adfce", "sighting--7978ddcd-65f9-41bf-adfa-777b492ea844", "sighting--dd6934e8-2c49-404c-b3f8-2208a2515707", "sighting--78df69dd-9f16-4e02-aa0c-5a201fe9a212", "sighting--50854214-f62c-4214-8e44-c78d1f38830a", "sighting--60412534-abc8-4935-b99b-9e9a9c8eacc3", "sighting--4e8b5031-f1a4-40fc-8920-40313ed3335e", "sighting--84526e86-fb0f-4ad2-9bf6-5536c194a837", "sighting--a8519839-1269-45bb-ae7a-e087d39bc83f", "sighting--d1902a81-80f3-416c-b1a9-ce3e12681741", "sighting--6c98ab1e-2f06-4af1-b305-59738d380f4c", "sighting--1299468b-2877-45e7-b85f-7dbf3dffdd4a", "sighting--650b2192-d1f1-4119-9820-4806d6a040bc", "sighting--1be56a65-8957-4adb-bede-331c81ee340b", "sighting--5c65858d-8597-4af7-8a6c-eefcb539a91b", "sighting--f67897a9-eb72-4a9e-81a3-ce8c2461b03a", "sighting--a62e56d7-4498-4921-b2e3-1fe5fdc24f40", "sighting--f38144e1-10d6-40bb-91a3-64b9a9af119e", "sighting--9e38a391-9594-48f9-ae08-f5912e207418", "sighting--dee4282c-8be1-4c0c-9dd3-53e8cf9c8f6d", "sighting--8aa81dcf-078e-4a8f-8831-9512fe4816b0", "sighting--706fd448-0e95-4c33-a1ab-ada2b31258e1", "sighting--9e726d16-ff40-4be3-9b7c-6ac580359a0a", "sighting--c6f1873d-49a7-4158-b34a-bf61bf065da3", "sighting--b9c0a2b3-ecf8-4fb3-919b-66aa81d57388", "sighting--b91db8ab-7447-41de-80b8-e643aafb5d2f", "sighting--c341e2bb-25ba-4228-98e3-b41931ad5e92", "sighting--c98794a9-d39c-42e1-9eeb-793c3dd9ac9a", "sighting--82de095f-1a16-48f1-8b59-91521d3abbbc", "sighting--444e6eea-6f2b-4750-8c55-e84d744457bd", "sighting--1d8118d7-dc59-4044-9045-a9ecad0211c7", "sighting--21d0615d-b386-4c07-93be-d26e8c9dac5e", "sighting--1d1becfc-b66a-46bd-ab3e-b0cc4c48981a", "sighting--f3ed9470-651e-462f-ae8e-3b3ea05a493e", "sighting--f5f41766-0a70-4502-b1e1-dc7a2c4fa0e6", "sighting--6df724e9-a01a-4cf5-a937-d1ede178abae", "sighting--4ae52eec-1dfc-4f3b-817f-3f758ba26f06", "sighting--93b27244-319e-4a5f-b54c-b7826e86ed8a", "sighting--dd4d8933-6046-4f08-a4a7-90eb22e34905", "sighting--b9e5736b-8090-4647-920d-49cf35231a99", "sighting--0fd75383-8dbf-40d1-b6d0-51a527075b98", "sighting--e29e6700-3af5-42ec-a7cc-7c76a984d5e5", "sighting--8e07ec84-c271-4d9f-a6c2-6f04a7757f71", "sighting--1191c607-e583-423f-b901-d8df5235c6e6", "sighting--82db0d69-7832-4646-b65c-f22ae1668710", "sighting--59804301-aeeb-40c0-b51d-25aedd176936", "sighting--3d89bc80-ff6d-4282-9af6-6eb0f0f67c75", "sighting--17080186-f189-47e0-b301-fbd551f3e76c", "sighting--30fdfb32-8986-43b8-822e-35550239f2d8", "sighting--f6b3f1aa-bf08-4917-ab4f-ee962118faed", "sighting--fb38a17c-92f4-4673-a160-94f5013db81f", "sighting--c9904915-8cb7-4d62-b80a-8b06679184e7", "sighting--6a7e7d95-c35e-4992-b37a-4b0120f051d0", "sighting--748dbe3a-dad8-4998-b4c9-d8fbc61baa79", "sighting--5102537a-5892-4861-b5c0-c7f7cafae092", "sighting--8c3a33e4-caec-4182-9065-a4ddd4b37c89", "sighting--836315f2-0c54-4a10-9881-be15f22c155c", "sighting--d65fd5f2-bc90-4aa2-a231-82f17a1346d1", "sighting--abe2e546-a47e-4e4a-ad2b-c4e67d2e27be", "sighting--b1bd42de-288c-47e6-ac2f-4afea5a39fd6", "sighting--201ea3e1-6479-4a84-a657-599b194e8968", "sighting--41df7fb0-0d4e-4640-8638-fc94005e2630", "sighting--67f52dfb-5175-41bc-9480-289c2eb183cb", "sighting--fecbd553-19ba-443a-9bd4-4a7901b14668", "sighting--03b510c1-6e1b-47d6-b95c-c2d8b2797335", "sighting--b61e15c4-f672-49eb-b7db-8647cee3233b", "sighting--ed7fbd29-1f07-4ee6-97fd-618c6b0e6064", "sighting--0dbab7a4-71e9-4742-888c-d13fd2cdf920", "sighting--aae8dd52-600f-4017-a386-1997a0a6f1b0", "sighting--61558498-9518-42b5-913c-4c097f7543b5", "sighting--9aab3afa-ceb5-4cb7-a261-14ad372660e8", "sighting--30b20c42-3265-4fd3-bd63-1c362b383287", "sighting--beb1667f-14f3-46a2-9be0-90e1a456aa2a", "sighting--23155169-8fd6-4026-a45f-ce4bbc45818a", "sighting--c2ce8ca9-cf60-4b05-8cc6-8eac374685a3", "sighting--c2864af0-efad-4690-8486-966bbfa4b659", "sighting--88413988-86f4-47b4-808b-c4afccc0578a", "sighting--f92e2947-b7a6-4e8a-8e19-58a68eff4f02", "sighting--6f84063b-fbbf-474e-aed4-280f112a041a", "sighting--68740dea-046e-4876-aa8e-8412a6fae82b", "sighting--4e2fb461-1f11-4a9f-a8ce-532915e195c8", "sighting--e813873e-1af9-482d-971a-ea91f2defcad", "sighting--5f963dbd-1812-4e3d-abfb-4a7060f0caba", "sighting--728c3c98-a37a-4ac1-9c90-d90691148dc1", "sighting--757919d8-7699-4005-b50c-12267066b7f5", "sighting--490c2409-dda8-4d5f-96c8-9542b29f1bbf", "sighting--bcd5d71a-9fe3-4b01-98f7-6039ad6c2c36", "sighting--27d7bd73-c4ff-4015-a4da-cce83643523e", "sighting--cd736367-22b7-4404-9dbd-07e92d84a6da", "sighting--53491880-3b05-4737-87d8-486b56b9bfec", "sighting--038c1713-68ec-4d27-914b-e93d08da0670", "sighting--15bdd263-d4b4-4904-b6ad-455e707e8661", "sighting--72f4c20c-8389-4421-81f6-cf6ccf6bf159", "sighting--5094863d-3726-4bba-851f-621f5c668c31", "sighting--58ee8dea-9e51-4310-b08a-3161e5e94512", "sighting--e4c040da-7cc1-40dc-a2e5-e92430e4f011", "sighting--41f25b19-2042-4f17-8f8b-a0309d716289", "sighting--b85f820e-cdfe-435a-a816-d3994e1b5dae", "sighting--528c2f1a-a8e4-4142-89b2-a0d9c3ebf150", "sighting--be0bc76e-2b5b-4409-a8d0-fcd5e9a20506", "sighting--a1e65be2-28a5-41dc-95c8-9cb6a903373b", "sighting--3f3f84c9-bfe6-4f05-b725-b765fe8bd51f", "sighting--2b1abf17-ed59-48f5-b2b5-f04e1ee6a094", "sighting--f56e6f6e-e339-44c9-a846-0880064ed8aa", "sighting--3f211897-59d2-4ed3-82a6-0c4af16c1492", "sighting--7a138cb4-2239-4725-bf04-9cc6df041f7a", "sighting--6946bc79-46ed-4222-a268-5a4538026a34", "sighting--082adbef-2691-4064-823d-507109aca0a8", "sighting--cd47e15c-3fcb-4357-b780-39da4eca1d35", "sighting--ca6c2002-76de-4513-98fc-5a56b3e6d3d0", "sighting--4d8ba627-9e03-41b9-a4b7-c16c8a474724", "sighting--f124571a-78f7-43a6-a14f-20fe1f3708ba", "sighting--34e4c08e-e6b5-4e1e-a76d-0642c82d7f01", "sighting--0e32e698-1fcf-4b22-afd7-ef064d655437", "sighting--2e220da0-3fea-433b-93e9-0d80d3cfebd2", "sighting--0ad1ec60-e2c5-4ca8-88a6-929ca7f5225e", "sighting--b968c92b-bcce-4437-8e80-f7525c8e45c4", "sighting--28695a03-51d0-458c-9a1e-9a7314fa5de0", "sighting--392fedac-1a81-4af2-93f0-112c2d5004d9", "sighting--139cc3e2-23b7-4eff-97b7-c929ee5bed16", "sighting--550cde86-25ad-486b-a6c8-8d534fa0affa", "sighting--2401fe34-4e1d-45e9-90a4-2450252499eb", "sighting--c58b857e-9f74-42e8-88b1-0a6facc833bc", "sighting--3061ee1c-9c64-442d-9979-15d26112752e", "sighting--623315ea-a224-4309-aa67-b799a65d1422", "sighting--b7b44f79-2681-4f15-878c-2ef4e6fd9864", "sighting--28623ef6-9e3b-4157-bf6e-7638597adc6d", "sighting--b5c51974-56eb-4c54-845d-20e0905e0bf4", "sighting--d6268c95-17e0-4683-b33a-e531c2ff29d4", "sighting--13f291ea-e962-4a83-bb56-2532feb0203c", "sighting--68f5b27d-7921-4c8c-94e2-d6611665b648", "sighting--c38ad376-c668-4f7f-a9bc-38b28a63a768", "sighting--ff94d126-7f12-437b-ac21-b53f7f36a4c4", "sighting--f71282d2-fce9-4eb6-8525-319d04265f32", "sighting--791b06d0-a5ea-4b86-a98b-0f209bf7bf52", "sighting--c9480b15-9650-4f12-827b-ac496f650fff", "sighting--cc1dcc73-f525-47e9-a1f5-9237b5eefcc3", "sighting--eb8c6ad8-9b82-4bab-8baf-9d081ec12a69", "sighting--bf76a55a-cc51-4f8e-b022-c4863adb07e8", "sighting--b49485fc-4071-4cb5-bc06-98ea647f2f11", "sighting--7482decf-5545-4f3b-af72-48b92fe08cd8", "sighting--d0396a31-1ad3-4ff8-80ba-7a3b44acf572", "sighting--0f418d26-53a9-4a7c-b0eb-686f5223ba55", "sighting--545075e7-6a68-4690-9c46-4d11da8694ac", "sighting--026ec74b-38b2-46b6-abeb-63dd31f90a8c", "sighting--79717ebd-b969-49fe-ba2c-d937fa4238f7", "sighting--6d4f5155-db80-4065-a5b6-ed815b5c24fe", "sighting--069b3344-d98b-491f-842f-581ccadee995", "sighting--3ab5b846-7bd5-4428-9251-1850311e31cf", "sighting--6f365a01-87e8-49a0-9a58-d4b86cdc2dc3", "sighting--a8657752-8d3f-4d17-92c0-a5781b042169", "sighting--72c1ad7e-5337-4127-8c81-c2fc10d659f9", "sighting--6e164ce2-05fe-46c5-850a-deb343591751", "sighting--ebb8b70a-a08f-422b-96f0-aedb1fd40acc", "sighting--f5e40a6e-6ecd-4af5-96b1-01f7783368fa", "sighting--4c68a27f-aeb7-44c7-a91a-93f668a39851", "sighting--e70cdd8a-76f7-4fe0-9f2e-b4115cb84239", "sighting--db6fb4ca-5bff-42eb-93a9-28078db82433", "sighting--ecd00311-6682-4f54-a48c-77ae557daa88", "sighting--707fdf69-7641-4a5a-9270-8298759fca4d", "sighting--dfa8335d-b04b-4065-9520-0cb6257afd41", "sighting--bbc149b2-d40b-414d-958e-8034c3648fe7", "sighting--54ff393b-f218-4daa-86ef-985739e1eb72", "sighting--d609c272-51fb-48bd-baa8-b4643c534bfa", "sighting--b3f4e2d3-eb90-41e2-b292-eff40923d8f8", "sighting--d48ca58a-95b9-4584-814f-5b64bd6097e2", "sighting--bde27af8-3172-4368-bd0a-c30f1f674c64", "sighting--56120cde-93f1-404c-9ac6-551e762d606b", "sighting--80d2914a-20d1-4976-8c4e-cadc9006a652", "sighting--5676b512-6d4c-48b6-a72c-1c9edef88dbb", "sighting--c9c7d315-a2aa-4d6f-9b3f-9ce65b9320ff", "sighting--37dd302e-bbd1-4188-a705-6636d12b4afd", "sighting--fe47b443-c369-464e-aa68-45df9c1b066e", "sighting--6ecfe2f3-b0b7-4267-a131-4d5a47138b07", "sighting--8f8d492f-0d3d-478c-b5d5-3f80c2129340", "sighting--979e6295-5b5a-4f3e-853c-d897b2be7690", "sighting--fa098442-a493-4669-a8dd-6e7e4deb7580", "sighting--721febc1-c401-4954-8a0d-4952723b3d08", "sighting--1b6fc738-e189-4f5d-8aba-a211b6f06eff", "sighting--2f05422a-325f-432d-9ca8-7d1ecd7158fa", "sighting--88f30337-6430-48cf-8dcd-628eada36062", "sighting--1a3a4a6e-8cc5-4800-97d7-e546fe97ce90", "sighting--b2145b84-2c58-48a4-bd35-34b8c992c5e3", "sighting--9c47682c-fecd-4ef6-ae82-fae2b4a6805f", "sighting--a9206a88-0676-4f4c-9cbb-a47fbbefea28", "sighting--a6d0c5db-6dab-4462-8585-0c5216ec37b4", "sighting--b0eac64b-2dfa-4968-aaf7-4029b5014a72", "sighting--f368e8f4-7ee3-4fdc-b8bd-d1af7a6ca636", "sighting--978f7242-9643-4926-a8fd-a5e4599ac0e3", "sighting--3dd6589b-09b3-4590-bc09-6689d5b842a0", "sighting--6abdc378-bfa1-4574-aecb-c9971d0a5224", "sighting--26bcd79e-2a17-4659-95ad-30e2af76d6dd", "sighting--6a55838a-8cfc-430f-8a9a-b22bb26785f9", "sighting--95d94d2f-23ba-4059-915b-bcceaac9bea9", "sighting--f3e646da-1c2c-45d5-a0d0-f032bcf28454", "sighting--fe9c3003-ddd3-47fb-8e8a-1b7ae8ff9a1d", "sighting--959485ac-f111-459e-9770-293d7f3f9d71", "sighting--85ac903a-d8d1-4d8c-b575-de64813efbe3", "sighting--852b35ad-2de6-4448-9ab7-2e6f8247e5b5", "sighting--5dc29bb3-abb7-42bd-a57b-2d253a05295d", "sighting--4531ec7f-c087-41e3-a62b-451b2b0d60e6", "sighting--29773dae-1969-4d88-a3d2-366eebc09779", "sighting--e33c87c1-c311-44ad-ba3f-3f953ae5ac9d", "sighting--6ceab749-5a4a-4085-bf29-c1ac3bfaafd5", "sighting--9112a97d-6589-4065-8372-bdcdca0495fe", "sighting--facaf764-3912-46cf-94f6-f415a16c6901", "sighting--dcfbbe31-2d97-4765-994c-161d43a84fb6", "sighting--09e6ca01-53ad-4694-9635-78b97ba3fa95", "sighting--a9f8e54c-1a00-4265-8d90-4d60fdb961dd", "sighting--041408b4-ea4f-4e14-a4ad-d4115263e5d2", "sighting--e0e14504-687b-4b0e-bb30-8018e6e96036", "sighting--8bc2c3b9-f9af-49e1-8641-c115c77a884f", "sighting--4c8797c6-5a05-4567-a4f5-cf376bdff2a6", "sighting--dfafdbec-494a-41e3-a8c4-3f980261baf5", "sighting--294cc001-ead2-4f55-928e-604fe39ea827", "sighting--426460cb-f136-47ea-a990-9a1ea4a94820", "sighting--50790e02-2440-40f5-8af8-69935052c2d7", "sighting--6f047df7-f076-4050-96aa-a0435821cd2e", "sighting--391d052b-0f75-4184-92f0-35ce84288f72", "sighting--39cc7195-c789-4420-8c21-77b68a4710a9", "sighting--a68b9cee-b3ea-4e76-b0a2-a73bd8227e95", "sighting--e216f462-f1a8-467d-bf84-19eae4d50ebb", "sighting--1a8be9bd-fafb-4492-966b-0f76b524a9fe", "sighting--20cd5338-b163-4c38-9d09-fc5c89a5e1ce", "sighting--9ef2ae13-8721-4e43-a968-8134f8906ae0", "sighting--2dbd6896-ebdd-461e-8b79-2bb76c68993e", "sighting--44915bed-69f2-423c-8598-42b54f9bb85a", "sighting--0aa24ea4-c7d9-487d-8836-b83697f3a5bf", "sighting--57ca13e4-6a62-497c-91b0-dd3f31964983", "sighting--10f8e996-de40-4954-8c7e-0b2fe5d4fe1b", "sighting--acbd165d-f10a-4329-a61a-4f91a66b9e58", "sighting--3b7210e9-8cb6-4db9-94d1-81bce8b6ee09", "sighting--1d6c48e2-7b17-4ea4-9965-8f7b2caa89fc", "sighting--e81b43f2-a644-4b8a-9b19-5b70c341a874", "sighting--bbf0bdb0-414a-4bbf-9cf1-9a7a0852e70c", "sighting--31bdaef1-6191-4ae1-ae52-5a7f37751555", "sighting--1ed3b7aa-9993-4404-a917-a82086f1d292", "sighting--48ee08f3-cb05-47e9-b668-122f5d6eba85", "sighting--316c05f7-6cf6-41e8-8d85-fd271536d951", "sighting--39ac976a-0b63-4c05-966d-7fb52b3e3a6d", "sighting--ca958629-c4e1-4c4d-90ae-c7832215b352", "sighting--016d5272-ea94-44b0-b78e-f301e127687d", "sighting--e1b1ec13-f257-4bfa-9dc0-fe741b65b18e", "sighting--200f37bd-86d0-4406-bbfc-d43162462d81", "sighting--962be879-26c7-4a99-81fa-5bbbd1d587a3", "sighting--57c7a907-7e78-4f4c-a51d-d60109147e56", "sighting--e2f4d22a-d14a-4374-a695-a10dc808d05e", "sighting--d249c89f-5d2d-4959-baf8-a3945ca87741", "sighting--0483bd28-67b0-433d-a570-ffa1a08a9937", "sighting--1973a103-d920-4aef-a87e-429a72f83994", "sighting--49930790-92ac-4375-81ab-f04a7db7b531", "sighting--101379e8-96f5-47bb-a5bb-397e56cb8567", "sighting--8ac435bf-6072-4306-9346-dada18c34b62", "sighting--c8c16421-0330-425a-8a32-93ee8fc3ca65", "sighting--581ae807-9269-4e31-9173-ad40702640e8", "sighting--253eeb18-4952-444f-a29f-6e9951ac7201", "sighting--0269fe0a-2cb1-4eba-ba29-036ce1587719", "sighting--d9446034-d4c1-452f-84f0-898d68c7e4c1", "sighting--59676680-55e3-49a4-8d50-a7285333bbf3", "sighting--45d6fbed-8b2a-4175-bfdc-9dd4e9112480", "sighting--6bc196b4-ca8a-42d2-9a7a-900aeb660c3a", "sighting--40335f64-c9f4-481b-9b85-c198a8011194", "sighting--ea680eb5-0688-4438-8530-0fdd8ff5ab60", "sighting--ec037337-cb8a-42b3-a715-94494ca09006", "sighting--418b8a2a-169c-46c2-b94e-f50f0995f846", "sighting--6c3b503d-d834-4094-808c-77de48f3059e", "sighting--5918d78a-f5a0-4f0b-acb3-eca69bbe00a4", "sighting--d8f972e4-db94-45fc-b911-d01c09fa156a", "sighting--1f9127a8-2bc2-44f5-9744-87d1c846bd93", "sighting--f9458b50-e24b-4be8-8cc7-2250b64936fa", "sighting--8c0aae4f-e9ac-41f4-8251-f8ce2b2f2df5", "sighting--33bde2ca-38b2-4144-983e-8b52942c347a", "sighting--e5fa1c7c-3274-41fd-beb5-a99141b4c947", "sighting--bf104f9e-dcf1-47df-b697-e7aceaba5ad2", "sighting--ceca7140-8002-4bed-b340-e35a66c6da7a", "sighting--2072e82f-3ac6-4a2d-a4b4-44ddfca11720", "sighting--3c3bbf26-c673-49ff-8732-4b7f6614af2a", "sighting--375d337b-e56a-4e3f-9dae-017d6582b6e6", "sighting--8113337f-e008-4243-8048-f25246f8baf9", "sighting--b20db33f-6462-48c1-ab18-382063a362e8", "sighting--5255136c-85a9-4d91-983a-e61f7a594aa8", "sighting--968c47f2-8436-49d2-8dae-9c11f9e7352b", "sighting--6cd70f35-a718-46f0-b211-adadba9b0c1d", "sighting--06f1fd76-2147-4a75-a92d-007ac836e392", "sighting--1b46d4db-92ef-41cb-883c-e03a9953d4b5", "sighting--c39729ab-6d32-48d8-bb8b-dd091a57cfaf", "sighting--f21996d8-b068-4214-87e5-1206bec9a414", "sighting--fc0e7422-1da1-4517-8aea-a06847918b17", "sighting--12f3deb5-4532-4ee8-a342-c91da3007b42", "sighting--2714831c-8a7e-4210-bd06-b37806030dca", "sighting--1078b80f-7f5a-4e41-8345-1ea76709ac08", "sighting--eec4d90a-600a-4aa9-8755-a8875b384cd2", "sighting--30dee7f1-b14e-4212-bed9-68315b550df2", "sighting--c705b4b9-9c1a-4ba3-a136-a6d865e876f4", "sighting--a38818a1-529f-4804-93f3-32f2792ee0d8", "sighting--de428801-e2ee-4164-b92c-db22940b6a00", "sighting--d7cfac7e-b041-4127-a57e-c28c5197d990", "sighting--eb6d75b6-8c3e-4914-ae0a-42d219778bfc", "sighting--3e728ee7-fd6d-4ec3-a2eb-f059cc1d5d9b", "sighting--cf52fd86-e56f-460e-bf83-7ed0e5f33b72", "sighting--4393dd6a-97d3-40a0-8112-bc0fb81b25b9", "sighting--7f7a5afb-2d7a-46af-b786-5345bbbb27e0", "sighting--5ac2ff8f-95b5-47af-91fa-a82288b6ad93", "sighting--ca4575c2-e86d-4860-98f0-a5991fcbb8a9", "sighting--c909960b-69be-485e-96ba-a4e01734d1bb", "sighting--ebaf03e5-7a2d-4fe5-b4c9-43a890f1e014", "sighting--d36352d1-f455-4364-a8e8-fe3f55b8ad5b", "sighting--2c77398d-7439-4ce3-bf43-628463ad857e", "sighting--197f048f-08e6-4b5e-a023-e736eec2fe0c", "sighting--89cd983f-1691-4cf5-a991-682a66a158e7", "sighting--ba800eea-df61-4782-b6ea-f3ec0432be4c", "sighting--581a536e-cada-4714-aff6-5bf4db207765", "sighting--550627d6-d247-465f-bffd-784609995068", "sighting--db238f0e-7271-476a-9a7c-1fda29afbe11", "sighting--59165ee0-39b1-4c87-8665-70b84e511850", "sighting--9d334ba6-14f8-49dd-b020-abe4a8ccc4a5", "sighting--d4c78138-47f3-4e7e-bc75-60a7487c0367", "sighting--b9ee57b6-0390-4a15-a124-3ca53b2227df", "sighting--868ac3f6-0498-4e2a-96e3-7326c75f7292", "sighting--f398e279-1890-40e1-bccf-7d7bba37378e", "sighting--edbd9f6c-eb74-423a-ad4c-a6a260a3f21b", "sighting--40a9bcac-c1b5-4f8e-9324-4477d7f4c2ad", "sighting--f8cd537a-02cb-4964-897d-13ec5bb8e3b5", "sighting--586a1edf-a7b1-4369-a924-ec33d7108a3f", "sighting--f433ecca-868d-499b-8554-28a6eaf59d72", "sighting--70ee428f-4d09-4e50-ba85-93e12087321b", "sighting--131356d4-31a4-4609-9f04-5d4bebf2b424", "sighting--a7075e5f-4874-4805-ba8e-1b496e79e179", "sighting--c73b0a67-395e-48bd-a329-8e413cf7bb84", "sighting--03981352-cea0-4496-ba79-73f555645809", "sighting--e9bcde1b-0ca9-4d7c-9b3b-da24c6390d6b", "sighting--df3dd0b7-dd9d-4480-8826-9f6768eaed9e", "sighting--df42f7cd-fa4a-40ba-b688-d5defd2f3f9c", "sighting--26039370-b84d-43c6-bb87-18e89555cf0b", "sighting--fb00264a-139a-4a9c-bb8f-ecce775af570", "sighting--b5b758a4-2879-498a-b450-cec659dda2bb", "sighting--f48c947d-6777-4403-b98f-3eb5d6a61c1a", "sighting--3e5c79e5-d346-4c76-9d1e-58e520d5ec8a", "sighting--2f932eb9-a9ce-49f4-8d53-a9903bfa0251", "sighting--533b578b-8f24-49d3-8f05-9784d624b2e6", "sighting--f8533ee7-a7b7-4528-ab5f-ebd4ee0f375a", "sighting--83720a7f-f4d7-4464-bfb8-6d2f9bb2a604", "sighting--6856d591-62f7-4904-b694-913cf61aa0c9", "sighting--a36d7497-6d8f-4e0f-ab11-3d88b3e1a829", "sighting--d2bc8738-9490-42bc-9320-6ac85010d11f", "sighting--bb39d86b-de7a-4ac9-a1be-31b539459ad0", "sighting--28cd3baf-532e-4575-879a-339c95d965fc", "sighting--cf75a1b6-ed03-4aef-9d70-128f5c92086f", "sighting--abc04c45-a243-40a6-a5d6-c39f8076ae1c", "sighting--82eca879-46bf-4947-b962-2c48f68d8d1e", "sighting--23716f4c-a049-48b2-a987-43a3e593b05a", "sighting--42a73a65-1a7e-4743-a8e9-495963b9716e", "sighting--cfeeb52d-8c3c-47ff-b86d-0f7ee9e775e0", "sighting--5df85b51-0176-40d2-b0a6-76f0a1b6aff2", "sighting--8dc4465f-ab9f-4c09-bc2d-9af7d42f9206", "sighting--8ae3256d-8c1b-482b-9ec0-31cfd949af11", "sighting--019240af-0d65-4d3d-9022-df3be6435771", "sighting--4cdfd70f-b22a-428c-be55-3a5e838ed5a9", "sighting--7e649cbe-d74e-4dbf-87b5-3e316987f39e", "sighting--73054b34-0539-43b9-b345-2e5fe609267f", "sighting--15060f73-1b23-4375-8bbc-25e6c4cce312", "sighting--8b058131-be79-4ec8-8d65-22bc101e94ed", "sighting--35322671-b7f9-43ef-b785-275561ca1187", "sighting--1c8c3863-185b-43c7-95df-0dc698742ab6", "sighting--f440a242-007a-49d0-a303-c7b51bda2037", "sighting--e71e2a8a-648d-425c-a42c-55e3c1c0e093", "sighting--d6906aee-2d94-4588-a1ef-5be43e661c1b", "sighting--e9168314-8e31-4987-9313-69ae734f88c8", "sighting--105404e8-09fb-4294-8c54-35387868957d", "sighting--40d3a531-2612-4649-9c68-de4b4497cbae", "sighting--513d1299-a5dd-4f28-a64e-6c8a98243c5d", "sighting--7ab4831b-5e5e-4caa-a64e-450f3787cdb6", "sighting--c1d2e83b-029e-44f9-98ce-01d249691335", "sighting--8bacac11-450a-489c-8f11-fb4a58cd19ad", "sighting--1177075e-60d5-4846-9fe1-c164a77aa305", "sighting--0a15c24d-531e-4a41-89b8-34796f9e63cf", "sighting--eec794cc-3404-4c50-8a55-a6b392805d26", "sighting--d0eb0ddb-2830-441e-a345-f490c6cf9854", "sighting--ca607dae-54e1-4510-a784-0d03eaf0c813", "sighting--3a83807c-8556-4996-973f-ca0533c650e3", "sighting--a3e77264-6594-4e3d-bd34-7e5d2e3efa77", "sighting--3da9344b-e120-48fa-8dba-f35e73c004c1", "sighting--ad35d4a3-6a0b-4f96-b878-6b4296b17030", "sighting--8f769bdd-15c8-42fe-aac6-ba9af89c33d9", "sighting--ea16bab6-d623-4e71-83df-74901b7a5336", "sighting--2aa8bbd9-12e3-4301-b611-6a3f82e7e797", "sighting--b9172357-ddc2-4e63-8875-cc3d66fd5b35", "sighting--e13d77ba-0cba-48a4-adc9-9421826fea27", "sighting--69cd4b2c-f40d-435c-931c-6cebbc62d474", "sighting--2b90ba39-dcd0-43e6-a992-861eb6ac700d", "sighting--bf4aec73-6f0b-45d6-b6ee-8b953403ba2a", "sighting--4c5034d0-c92b-4322-8ba9-b2b248d9e5db", "sighting--4e9f6bc8-19d1-4023-bba4-ae5a4469fc06", "sighting--4717000b-f522-45d5-b07f-f7b9c7b0b3fc", "sighting--c23d338d-caf3-4e20-9446-70be98b7a11d", "sighting--c5bcebea-e880-4f24-9b66-64fdd5de3211", "sighting--19c7f2cf-4edb-498f-bc2f-46ac5abee376", "sighting--54ad2a60-33e0-43bd-94c5-fc1b01df343d", "sighting--a868599d-cdfa-464c-ad74-9bc80d182917", "sighting--84fd2add-3d3c-4cc2-b551-8c2efc293809", "sighting--7849a182-3af4-4e4f-bc7b-6345fbab69ed", "sighting--29a8a04d-1498-43c6-9615-870b06a10355", "sighting--6a52460d-2f02-4584-94ec-de0acf05de77", "sighting--085066b8-101f-4a6a-b271-00e7a3f8b882", "sighting--7998e0f8-92c9-4387-b0bc-b74b9167c4d9", "sighting--fa1c377e-8165-4eef-ab35-d5579c03c427", "sighting--f90a46e0-9a6c-405b-af75-5429de9fbf11", "sighting--55eccedc-af56-4b98-a31c-6cea6dc77fcc", "sighting--aec70d10-5c5b-44ac-879e-4a9acf8320f4", "sighting--7a9e8d9b-a6f2-4c52-89af-3513c42c3590", "sighting--81eb3262-d64d-4028-8a17-94d4c79a717d", "sighting--5eb2bca9-2a15-4b14-9e4e-1fe060594be0", "sighting--44fc564a-ba9e-43c0-85a7-07a238d1c745", "sighting--0a25184f-a43e-41e7-aef1-3152b254ce34", "sighting--4073f568-abfd-4372-82c5-bfc638227573", "sighting--a98362f4-1c8a-40a7-8e32-cfd51e1f0641", "sighting--ed9083f1-d210-45e7-80bd-2f4ae98e5d8e", "sighting--5d91d61a-a7a2-4bca-9da7-7fea90a3a160", "sighting--07cbb120-c886-402f-b547-e297a401092c", "sighting--38582a8f-d77f-48ca-be97-694a866e32b5", "sighting--f13b1dab-93db-4714-bf32-cff2e2b1a25b", "sighting--b670d532-9f29-48f0-8a0b-a39cc296aaba", "sighting--a272f5c6-210a-44d7-b58a-025ef922e95a", "sighting--c82aab9d-0da6-4319-9353-bb83f3187d38", "sighting--1dde1364-f3f1-4767-a3f5-b40f7cf2f32b", "sighting--fcf0c004-96cd-407b-85dc-9f83ef85e899", "sighting--4103edf6-5716-4f18-b727-f4ccff255c37", "sighting--1106e2c5-b11d-4a03-af1c-dfa2e6825bc9", "sighting--b95540e7-054d-4f23-acda-e8d45d917797", "sighting--db22f3ba-ff04-420e-9405-4f700d569f83", "sighting--73f7d98c-adfd-4ac0-bc59-22e4852a90e0", "sighting--31886f4c-c507-45a4-9495-3cc859ef0dff", "sighting--1f342472-f699-4c90-9bde-f2693e8b4674", "sighting--586fd0ae-17d0-44cd-b684-1d78877bd7f8", "sighting--d833a919-c42e-4050-9f94-b249e84357bf", "sighting--789e09b9-7026-4379-af17-7f3313d01efa", "sighting--b1165dda-e077-4e1a-afec-552b56edad00", "sighting--d48c5aea-9d34-4697-af37-762a4d6cfb76", "sighting--ade24c5c-b695-4fe9-9749-512a22697a1c", "sighting--d1b8dd07-03e5-45eb-9fb4-4bcdaad6e988", "sighting--aef253ea-73ce-4bf5-887f-eeb96b71bae0", "sighting--2166a861-af6a-4025-9c66-f6d6a24fb3c5", "sighting--ee61cb42-f144-4f67-a86d-1f4e0efc464b", "sighting--7d7a3ed9-5d92-4cb8-aa52-f0d04f1f4d2f", "sighting--bb1873aa-a8c2-4b14-a29b-a2e8295a6302", "sighting--3861c69e-f46f-4a8a-8431-00d38905abfe", "sighting--35cb1078-f9b4-4272-a365-c5b7cc135ebf", "sighting--6cb173a6-fd09-4f43-a26f-d0fbea310240", "sighting--45b51bbd-13ab-4e84-af2d-13a1acc495e4", "sighting--a21ad24f-b256-43d8-94e9-cff4d2a92667", "sighting--e04cb287-09ec-4243-a24c-269703bb8f52", "sighting--96c826a8-58b0-4da1-85e6-6398da9c95a0", "sighting--911f3d10-c77f-43ec-8ed2-df22a479dcc2", "sighting--2df1ed44-27c3-4440-bfd0-6fbbc152fe35", "sighting--6a3a681c-fe33-4ab9-959b-d7162bbb7a1c", "sighting--e72863df-3d7a-44c4-a39f-e4aaae77d3df", "sighting--fa7e2a90-6fe9-4b1e-8ed5-ae5f9fb6e4ba", "sighting--b44b403f-9353-4c9e-bf0b-9e4962fd8873", "sighting--578b61c2-93a9-4993-a1d0-b2a41acd3a91", "sighting--2247204c-12b1-4328-b5ac-3708322d5dc8", "sighting--3e567586-52ed-4077-9ca9-50286caef5b7", "sighting--0bb28ebe-2ea0-46ae-99d3-91a846c1205e", "sighting--9496159c-cbc7-43fd-b765-cd66339ee278", "sighting--678a25c7-448f-4c19-8989-a44f6528b07a", "sighting--39640f78-88aa-4d41-bd36-2170a6a9e657", "sighting--593a53df-fabe-4f3f-a59d-51d845480add", "sighting--13a828b6-ff27-4cab-a8f5-628ee980a148", "sighting--e6098880-7fa9-4d9c-9a87-429ae7968fbf", "sighting--c7bfaa39-55cb-4e18-ae6c-60992fbe46bc", "sighting--aedfd4ee-7916-4715-992f-9a1b5e16f6b6", "sighting--b176ed2b-cb76-48d0-a7a6-f7e16c311d8c", "sighting--05d8c5dc-5753-431a-a546-0322ec8fd268", "sighting--f488fb6e-9021-4ce2-bf01-899cce4d1c0a", "sighting--604c0f4a-8b73-489e-b697-0e54f13c160b", "sighting--30282017-b18f-47f4-8146-c7eb6ef056fc", "sighting--a9efb005-0cb9-4da4-86fa-0476d2e099f4", "sighting--91d07b58-b221-4c08-a7e7-e458fb996722", "sighting--fcc2e912-5db0-4956-bdcb-fc091c140cc0", "sighting--bcc9230f-a072-405d-90fe-228a77449a0d", "sighting--bcdc85eb-bb10-4c10-9aad-79014305d2d8", "sighting--42287cd9-094f-46d5-9b6a-0c2f1e094f36", "sighting--aa07d437-c776-41ea-99ae-6b3ead286508", "sighting--fdaa53ea-8a98-4670-a4fb-a10c52b5ccef", "sighting--dd95c3c3-f742-4e90-bdf4-fd6df3942ab5", "sighting--d6b52f85-8c29-4a1f-8f20-1809ed74fb32", "sighting--6a97992d-8c52-487c-abf7-9c970d93f4a0", "sighting--3857dad7-a36d-4e6b-803d-6244356c36ad", "sighting--e1d654bd-522b-45d4-92c9-47829aa8b32b", "sighting--6e2a03e7-a43a-4ff6-a08d-b08b3b780908", "sighting--6d2e4c10-782c-454a-a048-6c8e3a991f2f", "sighting--572b286c-1600-484f-a514-31b278f78f8c", "sighting--b403626f-d415-4d8a-9252-dd1a4d47a7d6", "sighting--f62b720b-28bb-4583-a92d-219023ac6c6c", "sighting--7da73ccb-4efd-432c-902f-46be892547ea", "sighting--743fdfcc-cbde-4d18-947c-5dbb2d786cd2", "sighting--17705c2e-7325-4491-860f-51e344218489", "sighting--83cef546-f248-49bd-87b5-51bafb72eb23", "sighting--3f9a0b27-7ac9-444e-970e-db5736179ac1", "sighting--dcb41018-30cd-4e2b-8566-fce9b0553984", "sighting--2ed6491e-b274-4cad-846c-1bbfff87032d", "sighting--27bb1c04-d2fd-46ab-a1fa-301809df2e64", "sighting--b3835199-37a2-4c31-86aa-080068314cc4", "sighting--f734fc36-d1b9-442b-95c6-b953d56d8ed2", "sighting--a591fb0a-417a-443a-bd55-ea469ba635bc", "sighting--2af6b8fb-15ee-4cdc-9d35-608d463876b3", "sighting--e6bdde59-c5ed-4a37-8040-3f9050e41c86", "sighting--7d09dc16-db42-4d55-9427-ec65b2e4c365", "sighting--b5acf115-7d64-4b98-9b50-96a9b8a68f73", "sighting--9a99029b-ea9e-4fff-845a-70b5cd67811d", "sighting--224b52a6-3570-44c8-b44d-03b8a6d1e031", "sighting--d5be9bbd-d091-4f8c-9163-3eba5745db3d", "sighting--3691eb2e-60e6-4481-92f6-22e06e18aa43", "sighting--f257862f-b55f-4ab3-9b34-ed73beacb3e5", "sighting--0591401f-fd92-474f-8259-0310db5dc069", "sighting--2d1135e0-bf53-4b3c-aa63-4c55bdc62464", "sighting--65e8fc51-baa3-4633-823b-c3d10ac74eec", "sighting--136d228d-c647-4831-a704-43b5b1f52bed", "sighting--9c22a2e1-9cfd-444e-b9dd-98230161c6f1", "sighting--30b0037c-3e05-4467-9585-e851e354ad1a", "sighting--b0b49584-cd52-49e4-9a87-8b3c72a091a8", "sighting--9ff14024-4263-4568-96e5-4570eaef5c3a", "sighting--f1cea7a9-6a98-437c-9abe-f7a608500499", "sighting--e13c2fd0-340b-41fc-8fa1-a0136b3cc98a", "sighting--ea3183a4-2b8d-4336-b305-59f93e3d5961", "sighting--b920c6f8-e23f-4fd2-af48-c701f684b376", "sighting--7264745f-ad70-4ddc-99d3-3774e05a1d61", "sighting--583dde5c-b4bd-4fb8-95cb-1a7e4feae667", "sighting--90393471-f7b2-414a-966c-24410d8dd4fc", "sighting--c734e949-0e80-40ca-b406-daaefac231cb", "sighting--6a21dcf4-66e5-4f17-8059-838a42cf1e69", "sighting--57f18b92-aa45-4cfa-91a7-a0883bd0e0a3", "sighting--77d231a8-74b7-4db6-85e9-e9b7cb73b8ef", "sighting--b6a45738-e22c-406d-aa9e-2a1015101b97", "sighting--498e28c6-dc37-428d-80f0-11f7181ce1a2", "sighting--8f36617d-bfe3-41de-bfe0-6a2c007542cf", "sighting--0fd0f553-29be-4541-bb2f-fa80f565843b", "sighting--4e5f7419-cd49-49ec-bee1-e739258b6f49", "sighting--1b6d69a1-2baf-447e-93c2-5f33d180e11c", "sighting--cb1edb0d-d1ab-4af6-b5fe-73cc09f6e2fd", "sighting--99e8dd13-389c-4150-b460-f999dac4ffc9", "sighting--82c86237-d7e7-4c5f-9096-47db8de13c32", "sighting--5092f45b-e606-4537-82cd-e4d9770ceb46", "sighting--0b323870-4068-4bb8-95b6-54ce3043845e", "sighting--9c4c57f8-9286-4dd3-9234-8dbd6e3d859e", "sighting--97ce42c8-c75b-4b21-913e-e5a87f6a9225", "sighting--905b8bd1-d4ef-4705-8830-be774f20b02e", "sighting--aac6879d-facd-4199-b605-0f2831d86100", "sighting--0d026ab0-021c-440f-a77a-49c7c08ca136", "sighting--276cd0af-740c-4e4f-8c17-0cf6a1c6d00a", "sighting--d263279c-a77d-4fdd-a1c6-4304306d92e0", "sighting--48f5ed19-c71f-4c4e-90ec-fe9b4ed3e742", "sighting--20f4b80b-1ca2-4ae5-94b8-b6570b851782", "sighting--e8003bb3-fbda-4ab0-ac5c-a09321dbe818", "sighting--007742b1-d8fe-4001-81fb-85c37bad2405", "sighting--42426c34-14b9-4943-8348-24a21848f378", "sighting--a5b118e7-05b0-4bb8-b8dd-2d1134aeccb8", "sighting--36be05d2-6993-489a-958a-b0ed9b41cff6", "sighting--0e85021b-f842-443b-88d8-c208523c8cef", "sighting--3062dfaa-ba2d-4180-be1e-78e4319a03f8", "sighting--882f6c97-6e3d-4f38-a7f0-a9896cb609cb", "sighting--dc03a3b3-5f4a-4b6f-b8e3-038838429c19", "sighting--cc41589f-337e-45d8-a488-e4c2658492e6", "sighting--cb0d0c38-7bb7-4cbd-bae2-b702d4dcad43", "sighting--db3a11ad-77fd-4d69-922f-04457a2498e8", "sighting--328c0a81-08ef-4849-9efd-2b023fb87e0c", "sighting--428e9d48-b001-4187-ae95-25016e3a6d2b", "sighting--44887ae0-6b60-4e44-b9c5-c8aa9341c926", "sighting--638a8249-c0f8-4cee-8537-039bc3bdafad", "sighting--5c85ccf7-5083-4101-9797-c885d2335061", "sighting--5122475c-80b6-4bf9-b255-3b99efb49228", "sighting--289d94da-ca81-4f98-b49e-f02723851c0e", "sighting--a4826564-deb5-4f74-abbc-9258e8da5890", "sighting--0295dd9f-ed8d-4a81-807e-51eac89013c2", "sighting--68ff4c26-00dd-48e7-ab8a-5bd5e89a8b27", "sighting--d4700662-fa5e-4761-9750-f2c5a0d9ef0b", "sighting--233f9e3a-761a-450f-b34c-1c83b9d9b6ca", "sighting--570001ce-a8d3-4a73-a6eb-c8dc10d0c7e4", "sighting--6fdf514f-3dd3-4ba0-b56e-460547024324", "sighting--26501442-057a-4e39-ad92-d0e1a8547aa1", "sighting--2617c39c-425a-4e9b-8ace-321e93defe4a", "sighting--0b3fb121-948a-41ff-9250-b06bba2a6304", "sighting--3d06d9ca-6eb8-479d-a023-ba583073ad4d", "sighting--ef70668b-3fef-4923-8aa7-80e1182f29b6", "sighting--34943550-cd2d-44ff-a1ef-9fd3ded66cb7", "sighting--19796026-22e5-4c10-b7d1-cf634eddaf18", "sighting--adf0f217-864c-49d7-8dc6-57c162fcaa01", "sighting--d96533d5-d43e-4043-9a2c-3887132fb542", "sighting--e80ce3f0-14e4-4b5e-b4df-e26be7fce800", "sighting--e817d725-b48a-4f75-b408-e1c789d33808", "sighting--b12256d2-e09d-4a6a-a9c7-dea43fd70ec1", "sighting--7436b53f-d53e-436a-b9ea-36d06c48d061", "sighting--c4533b6c-d77c-489b-b232-58197567a4bc", "sighting--9f50afc6-f304-451d-82c2-9950e9344261", "sighting--7452b7e5-e9e0-48f9-afb4-359ef9444edb", "sighting--5a41caea-2c23-45ac-b609-58d8b1f15286", "sighting--14bc4fcf-7d2a-41aa-a51e-79367c991289", "sighting--a20b2a0f-544e-49fb-a517-55f666b4376a", "sighting--d0a4e03c-db59-409f-a3f2-5c3f413621c5", "sighting--8cf79885-a716-478f-a389-3982e58daf20", "sighting--f06e9791-278b-46a0-8659-84c48178adf5", "sighting--6255ffd5-60cd-49d5-a947-4de7f75ff983", "sighting--7217a494-3805-495c-a41d-9ffb1c84f307", "sighting--626b4fb6-ee08-49f6-ae7e-8670f708b6a5", "sighting--2f92d312-932e-4b81-946b-049b7bde794f", "sighting--c9e8c1b5-c67d-4a67-a8c3-e8194414a032", "sighting--599d1ca3-d6d2-4032-b1c3-e43ae3397e03", "sighting--ec36d7dc-bdeb-49a1-8ddf-7e4cb72ae258", "sighting--1e7cd6e9-1a14-49fa-9351-47c038c9101b", "sighting--9a91ab10-0f1c-46cd-8fc8-61ee1bd21f59", "sighting--da6ebaa1-4680-49d3-9e1c-bd967ec45c7c", "sighting--5e0cc677-cf6d-481a-a5ce-b32259602d49", "sighting--5f54e269-bcfa-440b-9303-ee1528fc57f8", "sighting--8336ad75-0dc0-4125-9563-aca540eb40cf", "sighting--84e4817e-4696-4931-a29a-596ff4936938", "sighting--50640dde-b2e3-46fc-81b7-307d35fdf67d", "sighting--590c63b8-4c93-4630-9dd2-5943b80279a0", "sighting--ad299ed4-e48a-4b7c-a3be-a29138486b28", "sighting--e1db0d66-95e9-4316-968c-471f5e82a56c", "sighting--7c9c00a1-ec0f-4dfb-9147-1b7deb5a52b1", "sighting--d123edae-22e3-40b4-b096-4bee8df36f2b", "sighting--14ce1174-0d1e-485a-bf65-32d8b5e15468", "sighting--4f29cb23-c4d0-483c-a193-d8b54996ee6f", "sighting--bdc86991-7e3e-4912-b1c9-3d41c79ad224", "sighting--97993290-78d1-496c-94c9-045943ccb98e", "sighting--5a9d5434-8617-424e-a250-6f129f951ffc", "sighting--58a1c771-8a10-4cd1-9ddd-c0404bb4a36a", "sighting--a7019e8d-240e-478a-a107-12c55fd360d2", "sighting--57b28429-8e9e-4730-968a-e22a5620309e", "sighting--b7ebace9-720a-4ab9-9879-490d3794f84c", "sighting--24b3a6db-f3fa-43ff-9a53-e56b1613d1e5", "sighting--d75f04f1-85c1-4753-82db-add439051622", "sighting--a649951f-409b-4834-bc73-6b67e447b98c", "sighting--d3e5e8a9-ffb3-4c97-95db-7145a212c8ac", "sighting--6d8826be-018d-49f1-a77c-d436eb74c3fb", "sighting--aa471422-45e8-47ba-a429-0f81dcbed951", "sighting--9db1dba0-9c0f-4654-863a-1cb1b3681b13", "sighting--b3904b1c-2a61-45a5-9b3e-2e7398415d09", "sighting--66d02ea4-2c44-4d56-8c3e-ba8ebcf84035", "sighting--aacc944d-436d-42f2-8193-c32971648fbc", "sighting--cada9dc4-2926-440d-8106-d1489e999e4a", "sighting--31732048-3cdf-42c9-942d-2608aa5dac63", "sighting--f29d6efb-ba8c-4484-87fa-e3f82c9fc6bb", "sighting--0a7268c0-f004-47d5-9a8f-56b6aa4ffc00", "sighting--a4fe1cb7-9c49-499c-b071-4c28ebeb3967", "sighting--669717d2-70bd-4254-b3f3-1a1f54c62202", "sighting--bb900275-868a-4177-9c3a-e41f7dc0b9d4", "sighting--04cf3c72-87a3-48dd-8f0e-8eb311b4e737", "sighting--e2c74cca-fb69-4e29-91eb-cedf1755760d", "sighting--53ca3fb7-7765-420d-8c9f-3b4455d8ff11", "sighting--23d29b6d-2969-4284-9b9e-ac4a51d8eeb0", "sighting--7d659c75-d9eb-4450-a722-4198209ec954", "sighting--1c596ad0-2438-484f-8e35-f6741ffbff59", "sighting--50adac8a-a70d-41d4-b09e-d6e98f69cb53", "sighting--0a546ac2-b4d0-4635-8e37-3d96608fbb7d", "sighting--1c3df15a-55ab-4f65-8edd-844ba63c12cc", "sighting--f65dd827-3e36-401c-8bc2-4b2f79b4fcc3", "sighting--6ce59587-ae07-46f6-b078-3e11bda89225", "sighting--8d11f69d-9c21-473a-8124-13d49db25e07", "sighting--6426588c-1bbb-498f-9f08-cdf5c70d07d3", "sighting--ba3827f4-512e-4bab-9555-fafd9688cf30", "sighting--6cb5053f-2126-481f-b45d-9c4e01bca86b", "sighting--14d3c716-e4c6-4564-85dc-b69926fbc848", "sighting--05c1b6dd-aac3-458c-959e-4db818212733", "sighting--984d43c5-ee4c-40ad-8613-41f2ce7f8726", "sighting--ab89061e-878d-4467-9acf-bddb6ea2fcbe", "sighting--08130623-c4a6-4a49-9fca-f57d75e5ccf6", "sighting--ff73e45b-cf9d-4d25-9572-ec3a4c400d2d", "sighting--fedcc954-b411-4b08-92ac-a177399e440d", "sighting--42e3283b-62e4-4ef1-a575-258053cb7403", "sighting--d8c18c26-e613-461c-a1e2-472cdb4af912", "sighting--3fcab3d6-8088-410b-aee1-bae22ac225db", "sighting--2a1bbf04-8c19-4065-85a9-730e9237f37a", "sighting--c53d3a0d-98e6-4d0b-a3ee-17163c06f71a", "sighting--4b9ff774-9eb4-4c17-8635-ef61650ff234", "sighting--d149e6df-df83-40d3-a7fc-4a9a55007271", "sighting--1905044c-ebc1-45dc-97d8-adf6c6d9b90a", "sighting--9af55903-c290-441d-a39e-7bafb5b96d0b", "sighting--cc4d6b22-99f6-4969-96f0-c2e2d34623ab", "sighting--311d1400-7ca7-4e42-b743-07c6713b31b0", "sighting--e0520050-e6c7-425e-b917-e5dcce00b590", "sighting--e335ec36-5eb9-4541-94be-9cbec1616b7d", "sighting--7fd138b7-a05b-49b5-94e9-04abe8e04db3", "sighting--840052fd-b84d-40b6-abb6-d222072adf61", "sighting--05316da5-c0a9-4710-b785-0e421b52c75a", "sighting--e34398cc-fd66-4984-8b1d-14c6b48f3ccc", "sighting--06de8a90-54fc-47b8-bfb2-27ef26b6428a", "sighting--60db9591-2ea0-468e-803f-e32db2938959", "sighting--02984531-5dbd-473f-917f-7490bfc00055", "sighting--3b7c01e7-e6f1-4951-a99d-d96a49212bec", "sighting--5a5ab2a4-7971-4672-9ab5-42770c03d1a0", "sighting--dd4bd5d6-0069-42cc-8efa-8dd40ed6c768", "sighting--50a8f820-acbf-4539-961c-b221354e5993", "sighting--7db0002f-46ba-4068-9d68-c996f267da95", "sighting--701005dd-b41b-4a97-b72e-aa4588544b62", "sighting--77e87d58-ec03-4182-aa1f-0ae9bbf04a82", "sighting--316a9566-47d8-49bd-8c27-eba4a63e056d", "sighting--a937ccfd-c8e5-4703-bfbd-398e437ef1b7", "sighting--e5c21a48-99d7-436e-9345-788e801edb52", "sighting--c68c8e27-dbdf-491b-80b1-e37ac5c35ebd", "sighting--ddaf567b-9024-4108-aeaf-ad3f214ba417", "sighting--9bc62969-3e32-4040-8971-88289a167780", "sighting--8ef2ad9d-3271-4d74-9298-ac2bd9f45535", "sighting--ee8c9ed6-f0e2-4ee5-8ebd-83816642fca0", "sighting--8518fea3-5b28-4375-bfec-b763886716e2", "sighting--596de468-5f8c-45cc-8d29-541b8526b794", "sighting--0b3a833f-fef9-406a-8417-39809679cf4d", "sighting--f9ae2172-2a5b-4117-b639-2cd6549adff5", "sighting--14f2277d-0e43-4e03-965b-25a62c653930", "sighting--84eb4908-e391-447f-a023-1769c9cb0127", "sighting--0c6bc106-c758-42e6-b27c-646b658cf0b8", "sighting--c743930c-b6b8-4630-9df4-03d6f29f51f9", "sighting--910c83bb-0d0e-4906-b09e-09fcd8fff75c", "sighting--3f193303-8446-47e0-89dd-75d21cbb8043", "sighting--feca7cb8-1b73-4cde-bd62-742acdbdd3fa", "sighting--9aa779cd-f347-4ab8-b604-a016a80adb8d", "sighting--2aa6457e-98a0-488a-a6a5-b26d44ca09f8", "sighting--a7a4c515-f207-4d1d-aadd-6981fa105a47", "sighting--70377857-fd85-428b-bb43-e9437e3f90dd", "sighting--2dffcfdd-bed0-4905-b8ff-44b8df8855ba", "sighting--7999aced-bc49-444f-9f9c-b32e931175f4", "sighting--1ba6294c-a477-49fa-bc5d-b427e8a201f0", "sighting--044d4c95-28e6-44f3-a2a6-604f9d474f5f", "sighting--cc036e25-6024-4353-a8b8-052dc4aef259", "sighting--34feab8c-5d9c-41cd-a3e4-817264faf9aa", "sighting--1a34d2f7-4ce4-4cfa-8ef2-4cf048c8efb8", "sighting--c01310f7-dc5e-4309-add0-fd6f60cde90c", "sighting--717b6fe7-9637-47ad-9903-7da84cb2a8b9", "sighting--7a3e85fa-e50b-4337-b784-a770067d7ffe", "sighting--6b4a6977-a5fe-4297-bcba-03c911eea796", "sighting--54b20c75-81c9-462d-bf96-64b365991b05", "sighting--568adc62-89e5-44a4-85fc-003f1167c936", "sighting--f7619cb8-b824-4607-998e-61c62fddabb1", "sighting--05229c4a-849a-4daa-8f6b-2d4c5ba1cd76", "sighting--a3577cf5-2331-457d-8997-4cd38d785496", "sighting--f9af19be-e0fb-4f54-a2ae-68778fbf403d", "sighting--93f17049-4133-452e-aebd-33e83a098e9e", "sighting--a39ead34-7666-43a3-8d54-cd43856c1528", "sighting--38409ccd-9efe-490a-a10d-07a4adc9b19f", "sighting--4013f464-b1b4-462b-8c9c-82c3c361873f", "sighting--f2ee3089-e373-4dd8-9d24-eb0d3cb0a8a7", "sighting--2b2fb1d7-42e5-4f56-b700-04ae9a3e3065", "sighting--fe9b26d7-15fe-4e30-b92f-18c17b35670c", "sighting--eda93cbb-9b28-4999-99ef-2e1fd2b67aaf", "sighting--cbeb526f-5e9b-4a69-bb74-e4e774670e75", "sighting--7726f259-e134-4b15-b3d9-ed787e8598ca", "sighting--c99134df-79e6-45eb-910d-b5e770f3e451", "sighting--7ab320f9-d36d-4a52-9090-5d7316717dd0", "sighting--0583a65b-1d82-4d93-ae15-1f25a32c4c96", "sighting--1b07f62f-7b32-4311-82af-48f6712c2f89", "sighting--eb5716c7-9d5b-4133-ac59-d7fa9ae575c6", "sighting--4dfbcee7-1fcc-4dec-886f-e7e98f3179d5", "sighting--d3c1f7d2-48b5-4a35-9628-0dd539b766d6", "sighting--a15b51a7-7155-4394-b1f2-5c3989cdd826", "sighting--040ad821-4564-4628-a523-4fd7a9824510", "sighting--3bffae14-5499-45ab-ac30-c272e3b7f756", "sighting--bbb1bed2-07d8-495a-a18a-b9e5329d35fa", "sighting--2c48efe2-7f97-433b-a966-ee40789e22b7", "sighting--25b52057-4712-41d5-856d-787e99b81691", "sighting--d5c9f0f5-a96c-451e-a87f-36e089e23b7b", "sighting--e1190797-142a-4fe8-9965-57651bb88c0a", "sighting--fbb865b0-7a1e-4094-8b7b-26fda689db57", "sighting--c50e1001-d378-4c6f-8c13-8d2872b17f46", "sighting--ab883537-acfb-40b2-90a2-eb4a5d710332", "sighting--1964aed6-9872-476b-ba1e-17bb8484ecc9", "sighting--f51e5c12-ec09-4be6-8ebe-a7afd7db697d", "sighting--0c7b1f61-463c-41c3-b95b-384007da9505", "sighting--8025b7f9-f5be-4d0a-98bc-c59aec9c62c1", "sighting--594dde66-7358-4fa4-8e76-38a73f11970a", "sighting--5b948558-6534-4ba5-bfa1-3680d89f2a89", "sighting--a39a1ed9-607b-4988-a8dd-9018217aaa83", "sighting--f2f79fae-72d7-4967-a779-6484454685eb", "sighting--d645cf20-491d-4817-89e6-4f6744402061", "sighting--4a961f60-53df-48f2-83d0-d0446e8b1eb4", "sighting--85b6ad4b-213d-4d18-b2f0-e9b563e476f8", "sighting--8a2b1177-6f06-4dbb-a88a-f03e4c5cadb4", "sighting--1e0df013-7346-4ddc-814b-5db1da7886df", "sighting--a67f5f0a-0770-4d8f-a1c4-dd4546af57cb", "sighting--cb606a43-ec2c-4fa0-b9ae-0518f1a84abc", "sighting--0095b333-0da8-4a5e-a9f3-a0ca5105da92", "sighting--b5340f55-63c8-45b7-acf7-89e9dfd9c4d3", "sighting--21a058df-5ea1-4123-a0f4-78cb6b80135c", "sighting--1ee4eb8f-1879-4aaa-bd21-5536ed42e09f", "sighting--85e140cb-4919-4ebe-819e-ebec38665074", "sighting--bf3cc84d-05ca-45a3-9f6a-95907fd87f84", "sighting--c39a2e89-f00e-4436-a033-175332bf0b00", "sighting--29d2ab92-2018-4663-b949-c6781b2bc286", "sighting--97c32f2c-f2b1-47c2-8bdd-133c67c28d58", "sighting--417ad434-7993-4a61-8f88-04813583f639", "sighting--ce7c939e-84e7-43a3-8a92-6edec66fba02", "sighting--06c253e8-c1b0-4b4a-83ec-1182f9b7eb5c", "sighting--af60a32d-8d75-482b-8352-2bb729042762", "sighting--293110cf-7057-4905-b8a5-bc14dc22fc81", "sighting--565f9ab3-dd2a-4fca-9f5b-49dd16acf231", "sighting--ef0a9c53-507d-4387-ba40-1ad331f0e70f", "sighting--65437fc7-471e-4af2-8c37-7727253454f2", "sighting--188fd395-4302-470d-ad65-1068fd93fb96", "sighting--39e86c27-e29c-4011-b7c4-9f11b7278e61", "sighting--d8b6675b-e1ae-4e92-a32a-39c55465dcb4", "sighting--e047951e-b254-4022-a823-df9c20b4420c", "sighting--4bdf1e9b-e1ab-4082-be25-c06c97242044", "sighting--a4d3ddfe-45a0-4f7e-b3d1-6b0bc8bd1bd7", "sighting--8b5733e3-8b90-4d51-a532-91224731ac8f", "sighting--a91185ae-a788-45ac-b2a6-dc5d96f96739", "sighting--96a397b9-fc61-449a-848e-02c0b2d6b337", "sighting--e921c522-dd4c-4c97-87fa-f78cb0c971f9", "sighting--5b4621fc-2b05-4da3-9932-f26859d2d37d", "sighting--2478e205-6728-4cc2-b93e-d893483304fc", "sighting--9f6503b6-4b17-4d9c-afe7-e6d1d26b40c5", "sighting--ec77a3a8-5b34-4f94-ae03-e51b1c42a6f9", "sighting--107f4d45-c9a8-4820-b26e-ebedca91bd94", "sighting--cfd2300f-db22-4fa2-9df7-15438c26385e", "sighting--b66b945e-5374-4e0d-9f8e-a92cbb67b31f", "sighting--afbc19f9-4249-4773-86d0-d50dc01e58c3", "sighting--6ef133a7-853a-4ce3-b119-89f2a5a7eee7", "sighting--a1177595-aaee-4d01-a6d6-6a368abe9e36", "sighting--61cc1f7f-2876-44ca-8495-ed0116c886d4", "sighting--7b46f2cd-cf2a-4917-91c7-8f78e7893951", "sighting--1cf1c799-7422-4c68-b702-a65c8852eeaf", "sighting--2fbbf4ee-0915-461c-b2fe-635f5162d045", "sighting--51a945b3-0aaf-4187-9966-a07b72c48be1", "sighting--bdcdb3f1-240d-46e7-925e-953a2d998abd", "sighting--09734784-0b0c-44b8-9c6b-99a557a8b8f3", "sighting--228fba30-f1e2-4d1b-b8c5-b9b79419d463", "sighting--21327e8d-38e4-4b25-8777-ebca299e2f31", "sighting--5e20883c-480d-4cb5-bc7b-62a4ccec6a08", "sighting--721fd218-c6cf-408c-aa0a-c8c3755023d2", "sighting--b899a92f-7d77-4555-8488-9bb101acc147", "sighting--aee555d0-709c-4603-88d6-e663b0161eba", "sighting--8da5eb4a-7f06-4fee-b0ef-994ce441c505", "sighting--e51f0fdf-ecba-4aa1-815a-14302e0dc4db", "sighting--ab3a4e32-1a0a-4049-b792-ecc7d4a2932e", "sighting--0f1a6b83-f198-4550-b401-42ca09dbf7eb", "sighting--2e6e885f-8166-4640-ae03-b51e7304c9e1", "sighting--0d56bdb7-692e-4625-974e-d26d24b98b64", "sighting--620d5894-8a35-4afb-8b18-ccf26bb9b453", "sighting--98b6efa7-b748-4fdf-aa1e-d01af42917a6", "sighting--622755b4-f176-42dd-ba69-48fd5c9faf56", "sighting--39667cc7-09a3-4aba-9df0-8b7ea84ac630", "sighting--641fd406-f7ff-4217-bd78-d71fac36ddce", "sighting--332ec8e1-9671-4123-9ece-061e2ca7b461", "sighting--8003beb7-fa8b-4776-9fda-11a424056679", "sighting--31be042d-e307-4425-9cf6-f895f1edfb13", "sighting--9c5692a0-7a5c-4c98-8fa2-dc0221e9e962", "sighting--0e70d912-9c40-44b1-add9-24e3f52fb804", "sighting--ef6b5a29-4108-4fe1-b6dc-56058c94c274", "sighting--3c430c3a-2223-4c8d-84f2-cec1e3b40b84", "sighting--7babf274-d559-44bc-95f0-43f42903e4c5", "sighting--e900dd9f-6578-4b5f-87a7-2bbf72d0cda5", "sighting--f1861efd-3e7e-4c9d-91ee-c5fba2fe206f", "sighting--34fd8c47-fa21-4c0a-861a-cdfcc0ac72c0", "sighting--dd64dfb8-0700-46d5-bc45-ddcb35aca021", "sighting--941ec97b-75f7-4272-af03-39731ce756bd", "sighting--d52a07ba-dfcd-4002-98b7-8c2dd7ede8d5", "sighting--4c98b406-9493-452c-8d2c-c2102aede5e0", "sighting--d8552fe7-7132-4e7f-b71d-70f2efc4e5e6", "sighting--f89a0bd8-bd45-4724-a5b3-2414160993b7", "sighting--9f4929dc-a519-4922-810d-4c5db5e5f707", "sighting--9e9cfc9e-24d7-4583-9f16-3d557a95c6de", "sighting--d517390b-7db6-4ced-8047-63535eac6fc9", "sighting--ff17edb9-f044-4faa-897e-1f7d45c4d1f1", "sighting--825b174e-d015-4392-b780-3193e7c4ea53", "sighting--a8346669-e736-44ed-8047-7d1e5fc82e22", "sighting--13d84aaa-b3e5-4cbe-a48c-82dd490b6851", "sighting--ece47747-1fbc-4f56-a0e2-aa22ca0d28a9", "sighting--015c4fdc-ea77-46a8-9867-87919941e383", "sighting--c3cfbdc8-c261-4308-b65c-77636378bcd4", "sighting--f9963e6c-95d6-455a-9102-7dbfba5060e3", "sighting--9336d2dd-cb33-48f6-969a-ab4313d969b7", "sighting--42876cb6-4d37-42ee-8559-a08840b2955a", "sighting--8ec23a9d-9342-4b97-b8f1-726ed344a63b", "sighting--fbb2096d-3eed-470e-a57c-d7048e51c1fd", "sighting--116dd509-93a0-4fcc-a24b-61f79d80fbe7", "sighting--792db815-f6ec-4e9d-93ae-c0babfd4c0b0", "sighting--6fa6bf46-91ee-4adf-9923-9a6b2cd57c98", "sighting--00dd02b8-5a95-4beb-bbfa-66eeec82b62e", "sighting--861a60b4-fdbe-41c8-b993-df8a0fa1de93", "sighting--2ae771fd-9abd-430e-bf2b-be67249a1ec6", "sighting--aa5280bd-95b6-477f-a875-1039e7093d23", "sighting--4ede864d-64c1-4be0-8073-9ff620f5e060", "sighting--c988f507-6994-46e9-bc83-6969fd7fdff8", "sighting--f7606bc8-5f4c-45a3-ad35-e9164fbb7304", "sighting--b78453b4-287e-4c3b-9ff7-ab3ee950d929", "sighting--a71d6f9b-c00d-47aa-8d72-a3bb302d0e70", "sighting--c95ea9e6-aada-40a3-9282-65ec15da459e", "sighting--3af4767d-9dfe-48f5-84cd-57d5092be54e", "sighting--a4c27362-8030-4340-bb81-472b81928e97", "sighting--14494757-bb85-4047-adec-ce7f0b52cb27", "sighting--d6945956-c7e1-41d2-bbb3-6968d7fd2ca4", "sighting--70f6669f-e463-4ecf-91f3-b7b3bb522cd0", "sighting--ace221c7-adcc-476e-955d-f067908b4d24", "sighting--9493c0ea-ade1-4048-b744-af4f9b92f31b", "sighting--104e4519-7a10-49e1-959c-71ce0b309862", "sighting--d171b9d5-76fb-453b-bc22-0037deb44f59", "sighting--f5869689-5140-43a8-8a0d-d5f664b46a48", "sighting--6f36d464-8f82-4318-bc07-b80f8c7e07f7", "sighting--010b03c2-0b83-4229-aef4-8480966d4f68", "sighting--a8bb797d-a8e2-4519-a393-7e30b740fb7b", "sighting--59910708-63d6-4bbb-a3a0-9f9b5e50757b", "sighting--f21f3124-fd7a-40ae-b3b2-5aa1af3bff7c", "sighting--254d66ee-1566-4095-a298-aa043f2ae730", "sighting--ed094255-af6d-450e-b5f2-6ba32df437f3", "sighting--f6972916-9093-44d9-955b-1dde76018133", "sighting--e9032921-57aa-40c2-9d7f-b199434d4614", "sighting--d66563e2-d790-48f0-ae64-25b0e7d3e018", "sighting--69c1be16-1868-4862-987e-fa9a59febc7c", "sighting--84333386-566d-4a9f-98a0-87a1b3052c0a", "sighting--0793e566-9075-43dc-bbe1-839355bb9048", "sighting--2d111ea2-2127-4913-b919-725ee1439eff", "sighting--45253ae2-f02e-4900-8806-0df2ece090cd", "sighting--a97e849a-76c5-4419-a667-3f09cf22d5b0", "sighting--9ca685cf-ed8a-444d-944e-c2fd5bfa4781", "sighting--72a2d4a5-06e5-417e-b8c2-3097472349d5", "sighting--e9d2ee22-aa05-47dc-80e6-7525d061073c", "sighting--c72fda72-bfaa-4b42-8b87-df6fdf6fadc9", "sighting--328de371-453c-4fa8-a4bf-5ac444c650fd", "sighting--879aa54d-8e90-4c4b-acb9-a5761b3e310e", "sighting--637c3614-8d69-43f0-bbd4-6ea60b5a6ffb", "sighting--221f6a57-3042-45ee-bf31-b3b357d6b267", "sighting--1a6846a4-b241-4070-af59-e07f34cc6414", "sighting--fc1ae324-82b6-4e6d-87ec-b53bf954e28d", "sighting--48103488-9b08-4c1e-89dd-2c34f5c670a3", "sighting--b913012c-59f4-40c3-9b29-1b60859957eb", "sighting--3964c8d3-3b5d-416e-88f2-0bfb82e89648", "sighting--42511fe6-c618-4659-9f23-549d2654c013", "sighting--65e80c39-69c0-4c6c-9d06-5da9ca97089d", "sighting--fa41ab75-b887-4f3d-8cf3-04adca728ec7", "sighting--d8d39a8e-20d7-439e-9e83-6074664bb3be", "sighting--f09efd91-127e-412a-837a-6c18f4419b4a", "sighting--6e7386c4-db77-4a6d-a926-c59cd490f3f8", "sighting--43b0f34c-bf13-4b1b-9bfd-8f3ac0987a97", "sighting--bc160380-15fa-4f1d-9f65-54c1b0b6ff5a", "sighting--7fe352b0-08b7-4f2a-9156-f466483e6222", "sighting--71cf0b77-3f70-4be3-b6a8-bb9bad70dda8", "sighting--a7271534-0d7c-4c48-bbbf-5d8f56819094", "sighting--ddb005b9-2bd3-4b6d-9f1a-27ad4df52ad8", "sighting--9756ae7c-1a76-478f-9e80-0288dc1c1679", "sighting--5c0cc282-5487-4c73-9ac8-06dd9faad809", "sighting--4a1aa29f-d766-4e7b-a615-678a46f5139a", "sighting--e9bd789a-09f6-4326-b125-2806a9c4f71d", "sighting--e30f7db8-9715-4930-904f-a373b86fe22d", "sighting--b11eaeb9-6f44-4fb5-b255-414ddb047966", "sighting--b12b9e9e-e277-4166-83f1-c80ee8f0e706", "sighting--55192d90-b54e-4c52-b975-dc5bc6c5acc5", "sighting--5ec2d57e-d1de-49ba-a537-0b4c9179f2bc", "sighting--d6f3f774-884a-4e89-9f59-77c7dd9c2df5", "sighting--5713f99d-56f9-49ab-87ef-66259f4a52ae", "sighting--98702062-10ce-48ed-9c5c-9f9ae09a231c", "sighting--0fd55064-b3ec-438f-bbb7-694c18141e9b", "sighting--24c315bc-09a7-4d30-9502-12c06754067f", "sighting--680deb01-aa02-48f9-b9e9-a2b35a370dd6", "sighting--cd5e2340-1553-42ac-9873-3af3681f28ff", "sighting--884f4a51-1a88-4919-a4ab-7af813875b8e", "sighting--e500dd3c-13d3-4f14-8fd9-7c4c92f909fe", "sighting--4c27079e-4442-4738-8dbd-bf0cffa068af", "sighting--1461be48-654e-40da-a34f-1b61cc75c4db", "sighting--273fd065-db04-4aa6-b0bd-a38bd68b5873", "sighting--93690458-cbdc-4d21-9aba-1cd205a0445a", "sighting--1bba36da-7ff8-4978-a904-75ab221bbee6", "sighting--18414a54-0617-43a8-bee1-3dab9ffc3a0c", "sighting--f1e05afe-10de-41e0-8cde-617007e71371", "sighting--d0e2612c-2a15-4a9a-a1f2-30a01c9b6fbe", "sighting--7fda7bfa-4d4d-4964-b34d-ff4de5fcd836", "sighting--8f9aa8e5-37d2-4d21-8dea-3cf06ebd6212", "sighting--d52d9191-86d0-45bc-8c90-1632e61e7a4a", "sighting--9fe8d7e7-e722-4b47-a8d5-ebd280921a30", "sighting--34868643-1105-4b56-99cc-8bea41aa8b75", "sighting--597343ae-1a59-4e04-a1a2-7d89ee608d32", "sighting--3bfbf16f-f771-4ae0-8705-7b070018cbe8", "sighting--b67ceb90-07d2-4afa-a1cb-96190ae6a791", "sighting--0fab6f77-e391-4193-8ed5-0ed160377bfe", "sighting--7039a79c-21a1-4290-b966-c76716eb46fa", "sighting--1f89a8d8-e51f-4320-be4a-1f9e29c2966d", "sighting--6ed605ca-355a-4509-bb61-cd4685e47e4d", "sighting--a06bbc82-de0d-46b0-a437-e48c2156fb5f", "sighting--d65eaaab-7b5c-4d81-ab86-d0083261ee9a", "sighting--795e9ab1-13b0-4430-bee8-a299a73ecd90", "sighting--3e7a2586-2283-465a-aea3-188134f30e5c", "sighting--19023a8c-ca04-457e-95f7-68da5c4eff59", "sighting--8d489bd2-95fd-4cf1-8a64-b66c18ff1bbb", "sighting--c6eaac84-821c-4a8c-80f6-5688f5d01232", "sighting--afbbc911-b4f4-4eb1-8ef8-0198d480c9e0", "sighting--782dd8a5-d5ee-4d09-a471-d4e7a118fce6", "sighting--911bcb7e-d455-4610-8277-bd5d688063f9", "sighting--f15398fb-78ea-4090-8f9d-add624b320f9", "sighting--f6438251-f833-4215-8791-854d383d5982", "sighting--e99ab104-dc2f-454a-b0b5-d238efa7a8cd", "sighting--95156f7a-e98e-4b38-8367-e0963c1aa50c", "sighting--094a87c3-71f0-42c5-8ba7-a1ce2f120f3b", "sighting--ca8e1451-7da0-4a50-8348-4c15f5c4d48e", "sighting--2ce49e40-9089-40d4-a014-07ce84a9709b", "sighting--057a6534-b956-4b72-ac02-4e91376bab53", "sighting--2a72c04b-0cec-43df-94c4-22ccb808d2db", "sighting--de458f5a-d099-46fc-9e2a-540b8b1519e3", "sighting--5522bab3-7ea1-4a45-a418-3fb08bf034b8", "sighting--58fd7bd9-d8c2-497e-95ec-db46bcde1eba", "sighting--903a6760-60b4-4b64-b56f-9b0c4d3b5f94", "sighting--91c9e86a-9d8e-4454-bba6-50065e8b7ba3", "sighting--760965a4-08da-4150-afac-7a342f071ab5", "sighting--a2313f33-4c76-4eb6-8075-e5be996058ad", "sighting--5419df5a-b68b-49c8-8edb-c8a0eabad910", "sighting--cb2a3d9d-61cc-420b-baf2-f4c0c65eddaa", "sighting--c6145771-f09f-4a6d-89d9-eb7f6b120dbc", "sighting--7112750d-87fe-4f22-85a0-86b0b78e036b", "sighting--7ce7be81-ef37-4eb2-9c35-884dd9c1cdd1", "sighting--888e50b6-5aa3-476a-9da7-0d960e758625", "sighting--41b54fa5-06dd-4067-a460-fe21007b6b7d", "sighting--8780e673-a199-49ca-82ce-f8ec4271305c", "sighting--e6b40793-f4f3-49f5-883a-3bb1846f64fe", "sighting--44301a95-444c-4610-b162-2f97d9087394", "sighting--b4472754-c479-4946-bd0b-12184337b8c9", "sighting--14ca8ef3-5862-47bc-8e39-52649acc7ae2", "sighting--d30bd9a3-e6b2-4177-bf7c-fb897211fd5b", "sighting--0387db0b-ac38-43e9-bf72-84040ff2d86e", "sighting--8a1e722f-407f-4c4e-a725-67a5656f4a6a", "sighting--5c2b78bb-f5b0-43fd-b96f-146dff71b527", "sighting--1725d615-c9e5-4c09-94b1-327ac01464c3", "sighting--be3455c7-a0d5-4465-ad6d-5480f7e8649b", "sighting--56b87d82-6c87-41d9-b99b-c4576959ab50", "sighting--995db0ff-96c5-4907-8c5c-54fd29d82399", "sighting--e82c66f7-8790-444d-bd5b-a2d7dbe5a63f", "sighting--8d266f7d-2c33-4c65-a091-3d28e822021a", "sighting--d9142ed2-fcf0-48a1-a3cb-7c3509871b76", "sighting--c61ba47a-1146-473f-96d1-02dd487e4688", "sighting--5203944e-a5a5-4588-ae7a-8078714d2499", "sighting--8a1b2eed-4f8f-4f62-9c0f-5fe5fd020165", "sighting--e57648df-1ffb-4f26-bdcb-a7ac69ff13a8", "sighting--c94c5162-fa2c-4fae-8189-40592c95eb2a", "sighting--a9269c7f-ceb3-4870-80d7-31fa5887ad5d", "sighting--5a4b4803-bcb9-475c-9b33-c12ca35dc2e1", "sighting--148806b7-f658-4188-aaff-8da29d2802e9", "sighting--dc476513-848c-4a90-b9f5-6a73a97677b5", "sighting--96b04c74-61f6-4f78-a255-ae9dc601b6b7", "sighting--5ead0011-d9fb-4190-b5bc-a98abed235f6", "sighting--512c4df7-0b38-4142-a8af-add9badb1f3d", "sighting--794551e4-279a-4715-a6e0-02813781a967", "sighting--f8efa266-c19f-414e-a434-3d9b4706d8b6", "sighting--add619dd-36c8-48da-b4fd-55fb74360a3c", "sighting--004e22e9-b2d1-415c-8650-7ab8e3d5826e", "sighting--039492e8-af6b-48b9-9088-49ce67574b29", "sighting--28ca3abd-6bcc-4aa6-875d-7b94a14a684d", "sighting--0febc1c1-908c-4589-9d22-87509e765921", "sighting--7b4316fd-17d7-4ad4-88af-66fee4c9570b", "sighting--98fb1e65-6dbe-40ea-90ea-322c79f03a2b", "sighting--c7eeed13-89e0-4277-a1a7-a287f737266f", "sighting--de8f92ca-5d2d-4d60-834f-b20b8a94993b", "sighting--4512fe6c-90e1-491f-a86c-1af677f2072a", "sighting--7ae4c0e7-a463-4983-8420-9099663cdb4d", "sighting--9f812e45-cfab-4684-880f-ddb47b8f8330", "sighting--aec8d162-4355-43a6-85de-5224e5602685", "sighting--a112c417-19e6-474e-9ea9-1cd2b3664389", "sighting--77928d09-331d-4e3e-8ac9-94e4e3fb7113", "sighting--b72d5a3d-37de-4852-89d6-f13db277b104", "sighting--8e3ed906-e01a-4a85-9400-8ac2e24a4a1b", "sighting--d4df2e7c-ac1b-470b-bbcf-aebb4d367f58", "sighting--c6f230e9-fa82-49b1-926f-b1334c54beef", "sighting--e18a05ee-96db-4820-b13b-827ba1819d3b", "sighting--6f5b8a5c-a986-4e57-972e-96c462e678ff", "sighting--43acb4ad-d707-45ea-9fb2-fd754b3295ef", "sighting--3b82d767-d11e-4206-acaa-23268979a61f", "sighting--755de4e1-904c-41f0-ac06-a42451987b6a", "sighting--05ecb105-66b3-449f-9400-a600ba71506c", "sighting--abab61dd-6302-4831-b8fa-7ba044e9910c", "sighting--4fa7acd9-4098-41e6-b142-fb1a23d28363", "sighting--2ee5c9a9-bfe3-4231-8062-9f416a205eb3", "sighting--d9760946-56fa-4122-a388-a08be2b4ea81", "sighting--38a0c500-64b3-4142-8989-6333200d64c1", "sighting--fc8db485-d890-49ef-a3a2-789cdd55f889", "sighting--f84a9c68-b9d8-4655-b029-0e43e941d1a3", "sighting--b28837fe-327b-4c3d-8f3f-9c51be0a54c5", "sighting--c194c5b3-cd34-4d79-afc3-abbcff5289be", "sighting--5eb78a5e-fe54-469f-afe1-b78879f158c6", "sighting--1e16d03e-520f-48ce-8420-4591532b4f76", "sighting--11d413f8-739d-479b-ba05-12b5de350312", "sighting--9da2ce25-2831-42aa-a301-f47cf45f0a2d", "sighting--8c37427b-c5b8-4bd1-88d7-9a16957c5bb4", "sighting--2b819437-7527-4a0c-8213-4f7e6fba7d2e", "sighting--7ab4ab3d-27c2-4eba-91aa-e2c8dd79d27f", "sighting--90ccaac6-50d1-47da-9038-0660172a48fc", "sighting--08db47ac-a80f-4069-9f67-ed582b944fb0", "sighting--5688639c-3997-4804-8d0f-681fb2ff7072", "sighting--186ca193-fbc5-48e8-9f53-b5c04aa44411", "sighting--267d2301-5b10-4385-a5e6-1a63ceb1b59f", "sighting--9110d977-acc2-4627-86f6-cb015fbe8792", "sighting--d376de9f-fbef-4f35-979a-41dfbb690611", "sighting--3c4e6750-49de-4ab5-ac56-00005bf4e558", "sighting--bafaed79-7d62-418b-b818-8ec399be544e", "sighting--ba641d34-f55f-4c9c-a6e2-d96a7cc1dd34", "sighting--6dbac821-9255-481a-beb9-bb2284b0be6b", "sighting--fe79dab3-8a5d-42b2-812d-035e05ca8b44", "sighting--fbec6603-5b44-411c-987c-e0665cd42b21", "sighting--76550842-6f4f-454e-bcfc-aa9488516359", "sighting--891066ce-c763-40f8-b639-fef9436d1d1a", "sighting--b41660da-2a10-48ac-ba4d-e468c0c7fd2f", "sighting--23a23faf-5432-44f1-b158-3c0faf057045", "sighting--236adf8f-8fa7-4c78-939f-c5800ae73710", "sighting--c01da5a0-95ec-4893-99f1-7af6397ff7b2", "sighting--f9fb84fb-5105-4ff2-9385-a8fbac3b196b", "sighting--37125590-86f8-4fa3-bd59-057497f2b7b6", "sighting--4588e056-6d42-4e44-8617-a04d7dfbd3d0", "sighting--a28e0469-6027-44fe-8ae0-ec2969556164", "sighting--1fa4dc55-df6b-46cd-9978-91dba259b2bd", "sighting--2eecd2cd-c6ac-4fa4-82ae-e2cf6c7c1fd5", "sighting--d140c28b-e63a-4520-9344-2f336f2a877a", "sighting--91b38119-3243-4a70-951d-e7c3f9e1524c", "sighting--35f4f281-5c21-478d-96c5-ff44b8b6c8b2", "sighting--5790b2dc-8b59-4f26-9f4c-a4cc0d17032e", "sighting--eca648e4-5faf-4ed5-8038-e3d23de6d7eb", "sighting--a106bd65-8704-49db-bf88-9d99ecf542eb", "sighting--79406b99-fd99-4e84-916e-dc37eb85aaf3", "sighting--b8dbaf5f-6c7d-4ff4-a072-02e3dfdb694f", "sighting--5a7817a5-296f-4c9e-96f6-dfb66c1faa4f", "sighting--bcb7fb13-2d47-4f25-8430-c0873e0d99ed", "sighting--307e4401-9e1d-4935-803a-23c0c17bff33", "sighting--11dce3d8-22ed-45a7-8aad-1fd38efa00d2", "sighting--30b6b5c7-e2fa-4fa3-9fc8-726e4556af8c", "sighting--6db02770-e2d0-4da3-a4c8-b0f64b4f1007", "sighting--7bab40e9-98bd-4756-989f-f986ce84c89b", "sighting--b6b7b893-c43e-42c1-86a7-d0e697dff606", "sighting--84ba41e6-3d93-4ab8-a8b9-57d7145d06f5", "sighting--8af26ef3-fb2b-40a7-b19d-08d5d5b6b916", "sighting--4de3575f-0a1e-4920-a7be-de965c28de04", "sighting--bc421ace-d2e6-4d5b-861b-9e7827617c80", "sighting--1ab69184-1c2a-4b17-ae28-be4e1b261221", "sighting--836cbe92-3375-4df8-996b-9d6c66afd5ca", "sighting--9f75e11a-6221-4d62-94bc-aaacb8ea7498", "sighting--b1437987-1a55-48f5-aa7b-f0f2316304cb", "sighting--502fd703-4f5b-43a3-b52a-3c54667bb00c", "sighting--06a72753-b8a0-414a-8604-0ad29c9c4f1b", "sighting--5c291887-88c6-40bd-a275-eb21e2c6ee2e", "sighting--e6ee87ca-b9dd-40a2-9c50-6408ee6ec7a9", "sighting--b2c34894-f6cb-4b16-b91c-9a6a0e7ff022", "sighting--539f01c3-9984-4b05-8510-ba0b4b7dec5e", "sighting--ef51b6c9-eb66-4f50-93e2-2270c934e557", "sighting--6d61e7bd-cc6b-4a40-98a9-0463ea7a7bcd", "sighting--3c3d338e-7800-4e2f-b279-cd3a5461256a", "sighting--5b7d1c9b-cc43-4bd4-8654-b7030b55e812", "sighting--c459d69f-48a9-4822-9c97-6f9ed2186b98", "sighting--1aec5e06-7961-47ff-9ab3-2296947b5a02", "sighting--12c158b7-9bd5-4033-99e2-0e77a85cf626", "sighting--fed66624-8d05-4636-a460-5e842e2b8fc7", "sighting--d463ca61-5994-439f-86d2-6861f17fa00a", "sighting--3ef5a1a0-7d62-4998-ad4b-aa1f6d4ba542", "sighting--3a303080-2c88-4dab-8a7e-d55bda9b03a7", "sighting--6ea0e582-89e3-49e9-b2fe-8c4481188b49", "sighting--b24d026e-93d3-4e51-83c5-1857f6d6ef55", "sighting--9fb25622-8d34-4dc1-98b7-a01b133b82b2", "sighting--dc46403a-7cbc-4ec4-b4a7-b8de0a8f6800", "sighting--a152e3f1-d89c-43e6-b21a-d15d6038c27a", "sighting--283e0e03-9e46-4ed5-98b5-b8356642f81c", "sighting--33a27a5c-afde-4cd1-862a-03180fa80725", "sighting--a77afe9c-5b57-420c-af8d-5fb724561365", "sighting--def245b2-8af1-4373-a9b1-14619cbd041c", "sighting--551a4421-1ba3-4a47-93b9-68815ffefce0", "sighting--5ece3abc-d4c8-4f97-9b12-676c3d57931d", "sighting--c95fed81-b2b0-4aa8-a3db-cc3d3f1f105f", "sighting--892fbacc-09d8-4267-8f8e-3778310f4a9e", "sighting--715563dc-6a65-43c7-97d3-e994609dab4e", "sighting--ed32e229-cb5b-4cdb-a7f5-b78fc2482017", "sighting--7dd8f72f-85c1-4e73-9fcb-af3c1a7b98f3", "sighting--a3263924-4d43-4c42-837d-a426fff95a64", "sighting--2b280909-3840-499f-93ed-dec4b4856543", "sighting--3de54e36-be40-4a02-a2b2-3ce36b43cbf9", "sighting--df6b0b73-8ffe-486e-9be0-d591a86b9616", "sighting--a91ae78b-d431-4de3-9834-c6e85e8b0902", "sighting--b5eafb5e-b40b-4c39-bc7f-e59e43361a65", "sighting--08440c18-97d1-4bbd-afe8-3fd2e8c9d0b1", "sighting--72c97125-a1b6-45e5-ad41-a51260843dfa", "sighting--b6ecd265-226d-4eda-af15-87ce54cc108d", "sighting--154d0252-2858-4dd5-b2ee-dc0950090a6f", "sighting--527908ff-7dbc-415d-9217-b5ba868143a2", "sighting--1ee19cc7-7dfd-4da2-ac5e-ec554d35197f", "sighting--288c1062-2804-49ac-9b53-1ba731e4eba2", "sighting--07a4cd24-5466-42f4-aa32-b23e8583edc1", "sighting--7a6a2c03-ed3f-4e20-afa8-6a5fdc3019ae", "sighting--5c3d3eff-7915-41d1-9c30-c983eca0f5c0", "sighting--f17f7ee5-1374-4c0f-9e83-643a3e4ad4a0", "sighting--e6ce8566-a59d-4086-951b-4e13f8bad2a4", "sighting--be19fc5b-5b7d-4053-a193-75f0b69f4b94", "sighting--cf414be7-8861-41c7-8525-ae0efd94b27b", "sighting--3855ff9d-e540-44d0-a890-d6fde0a99e3e", "sighting--408b34a9-5b8c-4b42-8068-5f39916cc011", "sighting--20b73ae7-c391-46cb-8928-bd2eaa7df5e4", "sighting--32643d62-c6e8-48c8-ba99-7c2e9387feda", "sighting--5d620fd3-48fc-480e-a3a5-c40ec08f51c9", "sighting--9d9aecd5-26f0-45d4-be2b-5c2fe3dd81a9", "sighting--19adc629-6c7b-4b17-b190-9972c8f97de5", "sighting--1c6af74a-9756-46cb-a464-9fef746caa99", "sighting--c0091fdc-3f7f-424d-89a5-24ee0b7e04d0", "sighting--338c0eaf-c498-4fb1-9d55-edf5f4152112", "sighting--ff37a18d-40bb-417a-9c09-84c7f628ea32", "sighting--0eda024a-6ccb-4105-9d69-a24b819a172c", "sighting--a967995b-d677-45ab-a955-d28e009d53f2", "sighting--a641b11c-e903-4a44-9f8a-af536baa8431", "sighting--df7c5cbd-73b8-4379-a48d-ed374192265a", "sighting--8bda838f-c45c-42fd-909e-19dd101b9755", "sighting--81130c27-75be-4bb3-81ab-4a75cc59873f", "sighting--3c331e4c-9fe2-4990-b084-24498639c763", "sighting--104302b7-8661-431e-9494-12dbbd4820e1", "sighting--16252de5-5389-40bd-9ccd-09f076b3c541", "sighting--fd5ea650-89d8-4eca-9dc4-2561300684a0", "sighting--96df795e-51c8-4700-8e82-5d7c4a9a348c", "sighting--0b5c0c1d-94d8-49d7-9663-072fb4a159c5", "sighting--8c827671-afc7-441e-bd6b-28c6964aebee", "sighting--09923fea-a552-4ab5-bbb3-22f99dcac737", "sighting--096b4e97-f75d-43b7-a95e-6ecc5ce12b30", "sighting--c67dfc08-ae1a-4bd7-a3e2-8c62bb041be9", "sighting--9a634819-1551-4d35-a8bd-bbe6e75cc153", "sighting--c228fe53-0c00-449b-b477-0e5f309ae0d0", "sighting--1e9974e2-6a04-493f-8af6-eb539c71c438", "sighting--26e18b90-84f7-4602-8da6-6f03ce8cb4d4", "sighting--d1f0be20-3156-42e3-a387-f261f5c35a84", "sighting--f339c4e7-66b5-4890-a238-9943fab1e41d", "sighting--62fc3c87-e906-47e6-9135-a2e8ac1b74da", "sighting--2d2bcf1b-0736-46f7-b116-925204aec691", "sighting--9ac1327b-34b4-4c02-8e38-cff05c4badf7", "sighting--4b2448b0-7020-48fd-a39f-f2bccc59a5fb", "sighting--4df0f63e-88eb-4074-80ce-9446f0459a64", "sighting--18ca634a-afb5-46f3-b048-99ccd6429a31", "sighting--799352a7-45f6-4607-b801-e4c294816da9", "sighting--563cb7d1-99ad-4f26-9d91-98e32b39f022", "sighting--ddb073c4-0bd2-475c-aeb5-ab0e134c147b", "sighting--665f9332-d59a-47ec-8d8e-2254380057e6", "sighting--0422e81c-dabf-4714-879f-59df640dbf8c", "sighting--6e2e52df-86b8-4a44-bf9f-86ca5fc36dbd", "sighting--8e1d2004-8016-48b3-815b-974465ad54a3", "sighting--897fd4f8-ee72-4904-bcb3-b0fac90d2eb5", "sighting--16d50de9-ea6c-4a6c-b8a1-25bfdbc552dc", "sighting--7abe6c0c-1145-4700-9375-fccecd6294c5", "sighting--316191b4-c5d5-4cee-a0f6-8e0183c18964", "sighting--71ae0dce-7db9-47b2-a890-e858e9ef5f37", "sighting--888b884e-fe31-4825-8e11-03fec928dac2", "sighting--af1d990e-db59-4322-a064-7b8c35ced2ce", "sighting--25b04491-a259-4876-aa0f-a0a259f12fff", "sighting--798bf058-61b2-4bac-82d7-52329bb34c94", "sighting--f9604b47-7805-4cc8-98c2-41ac67b21b2a", "sighting--1471dae4-dcc3-44ef-ba98-d765fb13b48b", "sighting--77ee49e0-9996-485a-bb98-1818ed9f7537", "sighting--9cd1d041-6335-423c-8073-3e4b1d434b4b", "sighting--598577f1-f1fe-49a4-bdf8-01310da86006", "sighting--d30c3e4c-9f7a-46cd-8a1b-d4f702296c8e", "sighting--2299b77e-cd6d-4ea4-8915-3688c79f5769", "sighting--d523af2b-3086-450b-8e32-8bd6cde566a9", "sighting--ea242ea9-2c78-491c-b69b-965264371e69", "sighting--043c9daa-6590-4dcf-9851-917468d4d19a", "sighting--ac6b9596-ffa6-4d14-ae33-5a087fdd2505", "sighting--31de940c-f7fc-46d2-b791-944821a4bb97", "sighting--9c352b0b-459c-433c-9fcb-af2cf2db91b0", "sighting--43d33645-070d-41af-9e0b-dc460a6c685f", "sighting--cc81e74f-9ebb-4247-abbb-f2ce2d20b436", "sighting--529d65d5-ddce-48eb-a046-d021edb2745a", "sighting--64ad7304-a521-420c-9c5b-fab6a6439e8d", "sighting--27239c86-6ef8-4bae-a160-5dc8233d8621", "sighting--af0936b2-ef7e-4ef3-905a-c5a6c1713b50", "sighting--cdabf6d4-0c7a-48f8-8e1f-c2703d30e1ec", "sighting--3b0fd891-939d-4309-aae3-6e170bb50fcd", "sighting--0f84fb6d-2d71-4ec0-963e-cfa690fb165b", "sighting--11c22fcc-3c3f-450f-8769-6558f3f015fe", "sighting--61b2c7e2-6eb1-4c1d-93ed-baef57636086", "sighting--e59b7887-dc55-4c9c-b722-c4d6d560fba7", "sighting--e2dc0397-7986-411f-948e-5edf1cf67b43", "sighting--2e87116c-8c72-4a5a-8f51-d1db079a3fe8", "sighting--69f47ed8-361e-497f-8058-98c503f85a85", "sighting--6aa6a72e-8b60-4aa7-a927-2a055327be1f", "sighting--2523b330-fb66-4201-a9ea-9ba7fa2f25c3", "sighting--cbb0056b-9248-4611-99ef-45e03d7e8f34", "sighting--9c913cc0-5011-428f-99a7-533a9e3d1862", "sighting--e699207c-c796-47aa-a221-e23a5ff59521", "sighting--5a924c65-5661-4b5e-b010-a81901b948f2", "sighting--1ff54ae3-58b0-4489-8d37-10dba29f0430", "sighting--2f195dfc-c186-4761-aa43-646b81ac9b12", "sighting--8bb1f6c9-08c1-4cc9-a829-84b5baf17b3a", "sighting--4d146728-1c6e-43cd-95a9-9216a78afa82", "sighting--f85b3919-65e0-41cd-8b66-e3461b2aa461", "sighting--a90e3fa2-6791-4b49-aa82-82f6fb9c9301", "sighting--3eff7be8-79b1-4432-b677-19232c5e9f51", "sighting--d37bcb54-2d24-4e72-b301-839d2c5f55cd", "sighting--e3174c3b-7e8a-40a8-a560-6bef6169d16d", "sighting--05233403-063b-4cb1-8e8f-18317e035521", "sighting--14da235a-4d95-4ab2-917a-99cf68973e37", "sighting--c635c832-0e33-4a1f-9b83-57196018cb5b", "sighting--c11c9b83-bf24-47f1-81b6-95d9b65e9d84", "sighting--aa92611f-513b-4b92-ba47-4d4a7052114c", "sighting--faa4afb7-b924-4941-bfb6-bc474ff7783c", "sighting--80d1618a-80f5-4aad-af02-a6edb6ca3cda", "sighting--39370e19-111e-4ee1-8bd2-178c25c644d2", "sighting--cdbc7aac-654c-4bea-9249-7ccf4e2c6c63", "sighting--ca921bd8-fd77-474c-97e1-fd7c2df03fa7", "sighting--5c22c4d1-dc6e-4bd5-b2ce-a5b9c2f73d14", "sighting--dc9d3a63-3dc1-4d92-84b6-dad236e22c38", "sighting--e77705d9-361b-4fb1-8855-b9b7f2891a5d", "sighting--383bffa9-23b4-4427-ad1c-c480d7f6918f", "sighting--d738fa6b-35f3-4f31-921d-2c5c3270c1b6", "sighting--507dd862-5932-408a-8045-1a84ef5f9ee6", "sighting--36413bb0-be2a-4111-968c-da1ffac745b7", "sighting--ec86e93d-cf9f-4100-9466-79d96bbd91be", "sighting--08962c8a-c1c6-4a54-bf7a-5647f58f73d9", "sighting--5172c19f-5222-483d-a4b1-304098ffe6b0", "sighting--3954627f-2161-495d-8706-130ab095f511", "sighting--3af3b3ba-b35f-4956-aa0e-5c85ff25cfbc", "sighting--e092a950-abb8-43f4-9056-3fe4a3e1da17", "sighting--bc9314dd-9256-48cb-9b88-6e6bbab10107", "sighting--506cb13f-adc0-4b57-a570-5f3183e83a78", "sighting--5e2b8e6a-99fe-4981-a7fd-d42c41f358e9", "sighting--e69aba56-2840-4c3a-86c8-cd0909e6cf02", "sighting--35ed750a-72c8-47c3-a52c-8cea8e9da2d4", "sighting--27969dc2-82f6-4f9c-9b8d-1eecc57acb8d", "sighting--dcca6544-8189-4f15-97ff-2ed000ef7856", "sighting--4ed11810-12da-42c6-b1c3-e2de9834075a", "sighting--8e245243-30f0-4485-ae11-87abde286cd1", "sighting--356484c2-24d3-4473-a733-3fbcfaa0d087", "sighting--0126a1b9-b794-4070-ba40-4cb131bfe79a", "sighting--07e61ea5-9dc1-40af-8d4b-b3ad46ff4584", "sighting--ea71e3d3-244d-4dc1-a249-84dac0f6f67d", "sighting--9a71ff90-e650-4e8f-96c2-e5c9371fac9b", "sighting--1f074e2f-67eb-46bd-b07a-9d80506dc3f1", "sighting--c874b4c9-9f4b-4828-b097-f56d96ed0bb5", "sighting--f9d1cfcb-8b11-4dbf-ab34-62ab67be7212", "sighting--56674e66-71c0-4240-8cc7-fc5bbd0264ae", "sighting--2771c940-d2ae-4242-8244-8a888a5d1d89", "sighting--275ce9c0-03da-404a-84ba-c24753b9b9c6", "sighting--cc0a0446-c64f-4ff0-9a85-98ebc338e937", "sighting--6e09e16f-a2de-4235-9c3a-b1ccb61ae1bf", "sighting--c5fc9dcd-9656-482e-a723-1a3ef7a03e58", "sighting--0027e2f9-bc30-4e41-be96-a7ae7d2499a7", "sighting--2f3b767f-5529-4456-abaf-2ddfccd1b4ac", "sighting--7ea6e38b-d1ce-4d21-ac13-a21d471eef8d", "sighting--ffae725f-ed01-47a0-aede-42cbfe16146e", "sighting--a2d172af-7639-4158-9413-7f3e89e9699e", "sighting--d7228ff4-7ac3-4af2-b6f5-db199848e853", "sighting--83730148-ed46-449e-b979-3362500fbbf0", "sighting--f9e5f938-d0cf-4040-9ff0-0e6ed90a85f0", "sighting--2bbf2319-2f7f-413f-bda9-0d1f045081db", "sighting--7bd619f9-5db0-45cd-bb96-75cb1e51befc", "sighting--704c055a-6ba1-42c4-84f5-3a47b6a959e8", "sighting--be45595c-c1df-477c-8e2f-694bd86548ec", "sighting--7038f7e7-5ce0-4d9c-b039-d58728815694", "sighting--98d03e3c-fab2-453f-b504-e155d6e00099", "sighting--49cbeed3-da7f-48a9-b3d5-401d79c394ea", "sighting--195890b4-d0ac-4a3b-b97b-75d4151ae01a", "sighting--65c04dd8-0d8b-47e6-8acd-1a8dcd1cc72b", "sighting--b2c0408c-da7c-48e6-abb0-0e350deaf441", "sighting--66b758e4-ce96-4663-9c51-254336a457de", "sighting--4c555a0e-cb25-4627-8038-06169c975af5", "sighting--29be7a40-79aa-4507-b1a5-b3785c50c923", "sighting--843cd73e-ac48-4def-862a-741665fbd66c", "sighting--88c9ad77-380d-4c68-bac0-c55f8b1d75a1", "sighting--83819347-21cf-480d-bef3-b6df58566bce", "sighting--44cca7c8-77cf-49a3-8f51-0f6d235e23e6", "sighting--475a1829-2257-4c9a-80db-1bf49f16e929", "sighting--7b3f7cc4-2ab8-4ea6-aaf8-b449b0a3e473", "sighting--dd069b69-2c70-48b8-9b95-c2d33d0b23c7", "sighting--3e8630eb-28e3-4d18-af23-1fc7665096b1", "sighting--1f05494e-7a7a-4914-ab8f-360901b07876", "sighting--78874bbb-8684-499d-aa8f-3c1ff560dcb3", "sighting--753fbee9-0cbd-457e-8881-aa3398e494f3", "sighting--ce7c7e47-719a-4ecc-ae83-2b08d0506451", "sighting--0de2ee9c-49d6-44cb-a779-1ba675704541", "sighting--f187d142-3755-4a07-a9fb-4c241695d706", "sighting--133a4512-05ce-45de-808f-e6facdccfc2a", "sighting--3c7adb17-702b-4007-bbdc-a1a3621b7810", "sighting--977248cc-ce1e-4a73-a118-d72ee610e722", "sighting--6efd4495-2491-4767-b2ba-31446d67e035", "sighting--567b3e2e-906b-4a5a-91d2-2533e0003e36", "sighting--c3728d33-c610-4bcd-8a97-55e95a9924ae", "sighting--ff570432-e833-4337-ac3c-c56df1519512", "sighting--c6fa5e35-3b1f-4e3a-9bd0-deb686e6301d", "sighting--379534b2-c0ed-43d6-89b0-d016d2b5b839", "sighting--801351ba-3d22-4e2a-a76b-6172dcbb9f72", "sighting--4e61d5b5-ceef-47c5-82f9-7fb26e797816", "sighting--4eec1c66-cba4-4976-b48b-68f7609b7564", "sighting--71642964-3a0c-4cf9-9755-078eaf03e039", "sighting--18339e3f-8935-497c-a86a-570bc8db25df", "sighting--2672bd01-c271-4602-b246-8e30473ecadb", "sighting--20671bb7-b820-4f8f-8ccb-4060ec3b34f9", "sighting--a0f3892c-2d5e-48bb-9bc2-c9d6e60c8331", "sighting--a6d20e17-5c1f-4a07-9f38-b06f424bcd41", "sighting--d2996a77-3d19-40ce-8aaf-3eb7f204364e", "sighting--6ca49361-a948-4eb4-ae4a-aee3dc4a49d9", "sighting--cc765e7b-ab61-43ec-b601-5cd2035aeccc", "sighting--07360b1f-08ed-43b1-8d91-08bdcd4a59d4", "sighting--13d7030e-518c-4cb3-8c8c-0d2f7a9d2112", "sighting--9752ee9e-b5da-4803-a02d-b5341e0242c6", "sighting--d4f31656-e1e8-43a6-9d6d-103bbc652856", "sighting--240cbd32-ed1f-467a-995c-e7d1b36e127b", "sighting--9aadf942-7998-446c-a4bd-2ea99b12cea2", "sighting--e879ce28-fa68-4ca6-b5ef-409b830d3801", "sighting--2b4638fd-6688-4793-ad75-21ac4e18a61f", "sighting--a5207856-6df8-4623-9a23-c9d6641e1e04", "sighting--07429a5e-b211-4274-adfa-a90c3cd7e7a0", "sighting--28c55f35-dc01-4552-acba-995bc873d508", "sighting--f4dad4ad-592d-4452-b58a-22f881a1f93b", "sighting--4fe24bb8-ac47-4e99-9a28-1943d3ccaf73", "sighting--fb46b71d-7a9b-4680-b5d7-2c6d9e968aa4", "sighting--49f5574b-1226-49ac-a553-ea764b011e30", "sighting--555db536-2b9b-43a2-8e71-5bb83ac6a22c", "sighting--19740fa9-cc33-479f-8b0e-148c08de87e6", "sighting--8cf031ed-f597-4721-a1d6-cc4d3facd88d", "sighting--80af47f2-8621-4e04-9fc8-85e7e4763912", "sighting--facd0608-d4f0-496d-965c-73081a278078", "sighting--f64de3e4-4c6c-42a4-87ec-b269348a302c", "sighting--efeac7b0-f0df-4093-b40b-ae927f415734", "sighting--289ef9e3-924d-4451-8a7a-0635574b9bf3", "sighting--f7441727-6de0-45ba-a6ab-4d302d1170e0", "sighting--ead6bb2b-1683-4858-8df2-b8b5f17bed45", "sighting--2664be8f-7033-4075-973a-3cb777a4e962", "sighting--e5103eb2-93a5-4cf5-b63b-d7d410ae83c3", "sighting--124cf4ff-a11e-457f-92b1-113b9ff7422f", "sighting--e6c0a5a8-e36a-4615-989c-6e35d64fc2ba", "sighting--167052e0-5d25-40a2-a7e3-492e69f04522", "sighting--be1662c4-198d-4de1-9b50-f12bdf4793e3", "sighting--2ab49d5b-4944-4a83-a2af-acd3a35602fe", "sighting--a306cb5a-e980-404d-a67d-9ce9331fb0de", "sighting--bc001f43-4d8d-42d1-b035-993013474623", "sighting--87cdbfdb-2fad-43e8-9a3e-818b3258a5d0", "sighting--b3b232bc-bd0d-42c7-acb7-9779c472dd93", "sighting--8aebe57b-58c0-477c-8843-2f89e7a62dfc", "sighting--0adc89d0-2aa6-45b1-8ce8-ef74fdb0d120", "sighting--61357ecd-4aac-4390-be72-ed4b81509106", "sighting--50500b19-c8b1-4605-9702-d2927c8b05b8", "sighting--9fae72d1-5647-453d-9ea3-976a257dce87", "sighting--baa223c2-2ef7-4f3b-9128-58fa336353a1", "sighting--038acd62-0334-4fad-9c13-969dcc300df3", "sighting--592a2e78-16e8-4051-8715-909c70f4e48d", "sighting--ab392b59-0ea6-4211-9d57-fd2b92a896d9", "sighting--c12a4d04-9fb6-4816-91af-839e2cb5615d", "sighting--fe8330e5-bec5-48a3-bf6f-c8352ef27c41", "sighting--9241dedc-d83a-4436-86b9-9f0975b67fa3", "sighting--0d6c8e39-bb75-468e-8c60-57a12fc75c93", "sighting--0df473d5-265f-4297-8487-1d45372cc9f7", "sighting--f5e7746e-661c-4b77-81e3-9a3cfcc7351d", "sighting--b7c26468-20c9-479a-aa63-e33111e7d60e", "sighting--fe39f76e-a1d9-4c18-ba07-cea506f097dc", "sighting--382174ec-b9d1-4e83-9bc7-30d466169197", "sighting--fbed539b-34c5-41ad-ac66-c37aaf22788c", "sighting--351327c8-4ade-4c7d-bfa5-4a33568463ee", "sighting--456fba60-f893-46c8-a5ed-9e95231dd690", "sighting--dc37b357-71d2-482c-90f0-83db26569ff8", "sighting--84b4e262-a0ee-4099-8ee9-0ce7d6435b0b", "sighting--139a76f4-e883-41e0-87b9-81b1adaf3821", "sighting--52c2e967-90c9-4439-9194-e308a1e9fd1d", "sighting--3eb652d3-06e4-4816-a556-bce3f0a9cec0", "sighting--d681e2c2-24ca-4c03-a4f2-bd45f4c2580f", "sighting--2fa0afbd-5bfb-46ce-9087-950785e10d8e", "sighting--504e21d3-1b85-4b43-804d-bef799becb79", "sighting--28e3a708-4d72-4a11-b4fd-71702d9d7d5a", "sighting--46aa635b-61c3-43e2-8172-43083759a91c", "sighting--af1ec050-d7ee-4713-aeab-79361f50463b", "sighting--f6f39b91-c3cf-4b1d-aba6-04d0d93726ae", "sighting--a0aa93a2-e707-49a3-b13a-c7560d78c352", "sighting--dec9e899-5359-4be7-9b99-b4285326a1fd", "sighting--21f5589c-1ce8-4e72-8f77-8aa78546d913", "sighting--d1c77892-2884-4bb1-bf78-a43686aa66a8", "sighting--9fb20f7c-e54a-4768-b2ac-107d8835170c", "sighting--d64c7d6b-c050-4207-834c-645edf015ff6", "sighting--f1545cc0-4d61-43fa-b6fd-db087fdcaa07", "sighting--c6ed0689-24ce-4f7d-9b99-6dc2ac724bf2", "sighting--773529c4-6759-4c94-b730-f086ea681998", "sighting--c3bd114e-da14-4ee3-8c23-a7a7ea0b8fae", "sighting--54dd44e6-127d-41c9-8b94-20188ab4f520", "sighting--6a778c11-a4f3-44d9-a357-a7385c43bc62", "sighting--79a72f9b-1ccb-4ce6-badf-3b4b0d1668e1", "sighting--bd6b1538-9192-4ec3-b647-0a815cce1821", "sighting--58116cc6-1bb4-46e4-8fbe-ae4b89a210d8", "sighting--864b1fcf-4f66-44f6-b8c3-1cc910da31fb", "sighting--5b1d39dc-441f-4153-a4f8-6f7c2446856c", "sighting--39d9244e-1509-4d11-bbea-1faff018a475", "sighting--8ad89953-33e4-48c4-b68c-61562527703f", "sighting--bf015351-8100-4c76-8554-d0805e7b1cad", "sighting--a64e4679-8214-4e09-8d6f-f042ef464af8", "sighting--17db8021-03f2-4efe-8774-a996c08aa183", "sighting--76ce3b7f-94a8-4d38-8ebc-f23c9a429c0e", "sighting--1ebf9f3a-f39d-4d85-a500-ca7792f0bb1c", "sighting--85d4085f-98e4-42fc-ac71-092a4d65c4e9", "sighting--c0ccdd6e-dc0f-48ee-b2e3-774f8f547301", "sighting--d3da223b-cab6-4c78-aaee-16ff65e5d550", "sighting--162359be-4cc0-45ca-97bc-f03cc39e05b9", "sighting--89a20b5f-b704-42ea-abdf-7bfc921a6c42", "sighting--919894e6-4725-486b-ab6d-047cf999c6a0", "sighting--bcd3e1bb-e31d-48a7-87ee-c8c3eb6e2a1d", "sighting--b84b1add-1421-44b5-a92b-0fae33d785ee", "sighting--9d72fda5-884f-44e2-9757-0f621c43c4a7", "sighting--cde941dd-282e-499a-8db6-a64a9483aa9e", "sighting--fa8909fb-cdda-45e5-83e7-3f419305c994", "sighting--636146f5-4917-4ecd-b272-5b702f226b91", "sighting--f05c7056-22ee-4b0e-9ca3-53c699d5498a", "sighting--6d26c635-3f98-424c-abd7-a3144204cd61", "sighting--7fa2602f-43ab-4db2-9698-b913cef245a9", "sighting--ae6724fe-ce15-4105-ac6c-c5096bb0667e", "sighting--243df8d5-6fd2-4a1d-9a96-7605f987a0fa", "sighting--ccdb0f8f-6e08-4c56-aff3-6197279f2522", "sighting--ccb58424-7ca0-4966-8b0e-f4015aae62fc", "sighting--2f0cd4b7-b0b7-4384-a298-2c0c605a22be", "sighting--dc122595-c468-409f-9309-7b5c6e18fc01", "sighting--b6166fa2-b10b-47ad-9a09-5cd5f7fd9efc", "sighting--7ed23bfa-ac0e-41ec-8e8a-85435bc6ddad", "sighting--3374beef-6173-48ce-8966-1e6bc65682ea", "sighting--0ba62899-9586-430a-b8b5-0bc237a34a51", "sighting--30e8c70d-327c-4b49-ac3d-ee6b69ca7a3a", "sighting--be642372-d17b-4e3f-879f-4d7662e915f2", "sighting--29887399-38f2-45f5-a921-0a14cf8d0def", "sighting--b2ef91cf-8384-4ea4-a6ee-8594302dd1c9", "sighting--33a2319e-dd89-4ff0-967e-7ceb47f814b7", "sighting--70990fcd-4ad2-4806-9e0a-2101e3717600", "sighting--c0a483d5-1618-49ba-b20d-8b738ac33b49", "sighting--9b65f4b8-6bf1-4ecf-97c4-7b39bc2c8229", "sighting--c056e5ba-e986-4151-8b9f-d5b8adbc661a", "sighting--e3c63d9c-e11a-4c97-857d-cbfbca734d25", "sighting--dbda12d2-3bf9-4d79-90ca-375da1671aaf", "sighting--efba1174-23fc-4f48-8fd2-f0361edb7aaf", "sighting--de0c6d79-0a83-4330-b9e3-2fe3104d1acd", "sighting--e5eec9f3-5cdf-429c-afad-7f5eaa6f80d9", "sighting--234c2553-5ed0-41cb-98a4-43ce7bc1fca1", "sighting--28c3f69a-3968-4fd8-95d6-fa600d6cff53", "sighting--9c246ee5-37fd-49ab-8dcc-27b2e6bdbecf", "sighting--0fb184ba-685d-48c0-b007-bc2ba9b22ab5", "sighting--4a0f782a-0a8a-44f2-8236-74ae2a5efed2", "sighting--68d3c765-4e3b-44a8-83b7-21674df56cbe", "sighting--56e0fec4-86e7-48ba-b255-8556f3ee9ff1", "sighting--d3cff73d-5be3-49c5-ac88-3ce7a607cedb", "sighting--fcd11e63-34a5-4524-a594-dd3a2cbee417", "sighting--5814fa34-6fd1-431f-a0a0-086fe0330b3a", "sighting--92c15f40-dbc4-4d96-b47f-a4fa26164bd2", "sighting--a4c772f7-708a-4c23-bfe9-b161b5f88a0c", "sighting--801fbec7-abb3-424b-969f-3b337186290c", "sighting--56f6d9b7-2123-41aa-8173-5e670a075645", "sighting--abaf12d2-d9f3-4a8e-bf4b-c08b514579b4", "sighting--5918ca46-2cc3-42cb-b6b2-6265b493343a", "sighting--234815da-a72e-46c1-b752-c565cdd66fb9", "sighting--e96c7a89-1a94-4c8b-8bd2-16e584d008d0", "sighting--ec20dbd1-b793-4bc9-b1d1-aebb3090b965", "sighting--0b268525-b607-4eec-9596-ef97de7a29b9", "sighting--00230353-3f9b-4169-a2a2-c4b36fcdc7f3", "sighting--43881282-f3a1-4511-a300-285702bfadb7", "sighting--1a1cb225-20c6-4b5d-9d9a-7633e94beb04", "sighting--d76fd58d-854d-4619-aaee-d906ccb6460d", "sighting--f81259fa-4cf6-4a7b-bd63-4dbd4b23914f", "sighting--8541bd11-6a0e-460b-9dc8-8cb26313e27a", "sighting--1a706eae-02aa-401c-a0a3-43757063c30f", "sighting--26556240-f858-479f-a6b2-2feb4cc19339", "sighting--ea5c1d47-1216-434d-943d-f6b80a1a2def", "sighting--b528c97b-6c6b-41b4-88a5-9c57ddda1773", "sighting--2558e790-3a6e-4976-a488-a42905954f63", "sighting--466f807c-c97d-4b28-970e-8e10167abe30", "sighting--aad9e940-4174-410a-82db-e904a1597748", "sighting--7021ee22-0aa6-4f6a-8c5a-0a736bf464ad", "sighting--6bacc175-a5f6-4be5-8d83-c3b0a588d9cd", "sighting--468e9b55-9509-4110-a124-4b647a39fe27", "sighting--8c339422-06f1-4213-a136-f6481769d1f7", "sighting--74e4b030-f6cd-4533-af6a-38c4307ccf2f", "sighting--04ba8189-2dcd-45b7-9944-a0b4c8bae76c", "sighting--57e9d3bf-a86e-4bbe-ae7b-4d8070cb4415", "sighting--ff78b72e-9f69-4aa1-986e-e1891052e9d3", "sighting--f773ce1b-0730-4472-8391-fd79273d0f3a", "sighting--b2f3bfa3-d579-4129-9acb-0fc150db94aa", "sighting--73a7eba4-0a2c-4118-b35c-210e35f18a66", "sighting--61c775a9-1798-46df-99d8-b14accd25275", "sighting--21de36a6-1caa-4f4e-83a8-9656ef6cff74", "sighting--a4d7ab93-64ba-4824-a4c9-d0b9c60febe7", "sighting--1c7544d1-4f33-4ba9-addc-f239a9d044ac", "sighting--0fce8074-fbb4-42ff-a23c-2725e35ad8da", "sighting--70ff5077-2023-431f-984f-e4d22f974481", "sighting--db94b703-5662-4f87-89ef-8f0509eead54", "sighting--b0efbae4-17c7-4e47-8fd7-938a343f5e1f", "sighting--71c6558e-2fde-41a1-acde-7248d6461972", "sighting--3f5ad3d8-7090-49fc-b217-1e119c1bc097", "sighting--01d3c260-6e9b-408c-af3a-bc85b393d2d0", "sighting--9c68baf5-ad5f-491e-bd2a-a7a36270500c", "sighting--543d1e58-4534-412a-8713-c614d35b4f5f", "sighting--4a42e6d7-4099-4188-aecd-e978473c24cb", "sighting--0cc1f1d6-fbe4-4b7c-97e9-40ba20373aa0", "sighting--14967ad8-1854-4a1b-9808-e239c2ae29e6", "sighting--06251d29-a1c9-4960-900f-e49d0f256e7f", "sighting--2106f253-6d24-4ca6-87ad-215e1f21beb8", "sighting--10ce6f27-457f-4102-a42f-0fc7cb7a293d", "sighting--b8537e36-6212-45ee-8eec-a910f6091366", "sighting--a621e82a-d4c1-47c1-8269-04cac853915d", "sighting--85811715-663d-43e1-b03c-5fb4fb636e80", "sighting--8d303915-572d-4cf8-b66f-3363e26e5ff4", "sighting--127cfe14-3e2c-4071-ac43-47d1b56634e1", "sighting--ec28efb0-d6ff-425d-a940-cbd2033fc2bd", "sighting--5da1c310-dd0a-4ec0-a78a-272b38c977c5", "sighting--1f17ecaf-4c38-42f5-b483-dd0bd192fe56", "sighting--13818698-407c-4eb4-8b77-8eb92f7e14e0", "sighting--34300e04-8077-440a-b156-2f5ea9cce38d", "sighting--b6be2217-8059-472f-85a2-df00623a844c", "sighting--2fc47535-90f0-4289-80db-87f73e4d3180", "sighting--169970b8-e6ed-4179-b75b-43befa2fdec1", "sighting--f126c9f5-4dd3-46c7-b3bf-4b49f4d297a1", "sighting--906158a6-db71-4975-b048-884a5bda115c", "sighting--ed23d895-e95d-48f5-a60f-bc7560f6c196", "sighting--78f5f845-4ef1-487c-b8e6-743653ad6057", "sighting--9eca19f3-17a6-4f11-95e9-6bad4d4094c1", "sighting--129e5223-1a2f-4c36-8573-73e25a5b9008", "sighting--a17c4b7d-e416-4826-97dd-f9e0eacaefd2", "sighting--63592fea-5e08-4926-818d-cfebc77f3b11", "sighting--e0d3fafa-c338-449d-8962-1fcee111796c", "sighting--d570d655-f730-4459-a965-54ed44925dd8", "sighting--5e23aadd-6fc1-4ec0-8b8b-1414a1f9918f", "sighting--4d14cce4-4548-4fc7-9788-76536e5a2272", "sighting--3435a35b-7214-4865-83d4-11f0b58bb08c", "sighting--b72f8e57-94f8-4a63-9359-deffe57b5995", "sighting--7a527d41-2d6e-47bb-af32-4c616b42d172", "sighting--cf42bcde-308e-4a97-b6c6-f92e616177c9", "sighting--68432f36-6e1e-400c-8487-40181161bc7a", "sighting--53bfad57-d1c1-423e-a103-415ef4e383c7", "sighting--d087436d-604e-43d7-a5d0-8924efe31342", "sighting--ed9c886e-1238-4e3e-af4b-dae72a23e72a", "sighting--06f5933d-c971-4d5d-8362-5c761e2845c4", "sighting--f9ad36d9-0c24-4eaf-af68-71f6ebc6b9c2", "sighting--34f835cc-80cd-4452-aa69-5f99c313d202", "sighting--730b38a0-e3c5-4876-9a1d-ba947e399aa8", "sighting--fc7996a3-7a7d-4184-a4e8-1c2e87b999ba", "sighting--62e88833-6341-4688-876d-63645c6eb31b", "sighting--624d3171-7a4f-4ff7-9be3-9bd8c54d8aa2", "sighting--2452f498-4209-4eee-982f-2fdf15932c94", "sighting--7d11f4cf-3c5b-440a-b3d2-e54a5b2bfc77", "sighting--afb5c3cd-22da-43ba-84a1-f218e146d3e0", "sighting--d91c7875-4076-4af7-a85e-b4392d4faea5", "sighting--aaeebf2a-5016-43c1-b94e-59be4fc08bc4", "sighting--efc25536-f0a6-48cd-8b07-40ff22f5877c", "sighting--9e918a3c-8f2d-4035-9006-cfd501e92267", "sighting--fae00cc7-6dc1-4b40-a767-94eb4e157b44", "sighting--c57d8b37-6007-45b5-a686-5092647c91c2", "sighting--25b6be09-dd54-4074-bab6-ebc222633e7c", "sighting--8b45807d-5c67-4fb5-bb19-03fb6a9e56d2", "sighting--65f2124f-aa80-4142-824a-f2a93555936c", "sighting--4e6ec381-132f-4656-b840-41f7c0f125f0", "sighting--ccdc24c4-b257-4e10-93ef-a5b60ec0f56a", "sighting--d743d176-20d6-4f2f-b17c-a48a081aac1b", "sighting--53d6e614-cffb-4aff-86aa-879ed88878a4", "sighting--cf879ab3-46fd-4fd4-9783-d39766c5e155", "sighting--56c7ace6-6618-4b3f-bbf1-342c73446bf8", "sighting--d72ea552-fb55-4491-811a-c76b8858abb5", "sighting--6461edca-c4d9-4c70-b0e8-4013e2e7f9bc", "sighting--ca59488a-1be4-4606-83f0-7610dbe54430", "sighting--81be6163-6fd8-4bdb-943f-80a6ef855576", "sighting--0d973a88-3b3f-4f57-896d-096b9b8c255e", "sighting--ebcac29c-0b4e-42b9-a95a-b7d97b7ce3a8", "sighting--6d2e3b1a-7d26-4146-a2e5-b92ee4ddc1a0", "sighting--20c6af28-4a8f-4fc6-8e1f-2fd352120716", "sighting--a3aece1b-55d1-411e-b2c1-c258a04f5b2a", "sighting--c6377464-19cb-4bc3-a351-5fe4fccb6363", "sighting--f420f90f-479c-4a2b-a774-9848dc9f2bc0", "sighting--8c8e08b0-74d7-45fc-952f-f963c418b49c", "sighting--687d99a4-d4e7-4015-9e14-7f276e98924d", "sighting--eac356a7-25bc-497e-9c08-13d0689c91d8", "sighting--334b34f5-815b-4ad2-a2ca-b15c2c29bd95", "sighting--adcdab5c-cdd3-4f8b-8d98-237446b4eb4e", "sighting--c561b651-a194-43f1-a59c-995324330aa4", "sighting--ce8e7215-748d-44dc-a2fa-1f11c8026551", "sighting--a4179091-aedf-4590-a0ec-46e0ad9789aa", "sighting--68be1301-5038-4971-a43e-6b525c8410b1", "sighting--12c2b468-9633-4471-ac51-b2c2bef57057", "sighting--0a920dbf-8165-4490-a2e9-28dcef95c31e", "sighting--c698664f-332b-4367-91ee-5b122d602a83", "sighting--adc6c672-f921-4001-994e-188a148abd70", "sighting--1daf6243-347b-402f-a45e-d1570970a7aa", "sighting--d1b859c8-c161-444a-9edb-4201fead75e3", "sighting--bb562e17-ac5a-4254-89c5-6c49b7c0f25c", "sighting--7e0ecf08-d3fe-4aad-97b8-0ee687e14830", "sighting--aafd2109-33e3-4add-bc87-ecdf3c93db85", "sighting--f9903673-2e57-472e-81e3-7834a7677f8c", "sighting--90df8829-c298-4b5a-bfed-20912d255c4a", "sighting--090b1648-572d-4e03-9aeb-5d30c776a74e", "sighting--d22c76e8-9ce3-474c-8761-404f8692f991", "sighting--d2bc9140-e574-4704-be59-ebea4afcb9a8", "sighting--ba2eed2a-d4ea-46f4-93b2-adb94e773843", "sighting--3b3b6947-a61f-4837-99e1-e6be6b36b423", "sighting--809efe85-9bd9-4031-b58a-858794094b8e", "sighting--52953b9d-0a69-49cf-9315-d2f1982443d8", "sighting--26b4ef5b-675d-4e74-a113-14eb48452faf", "sighting--e8fb93da-a495-4c6b-8e41-9fe280a59016", "sighting--e7927270-9084-4fcf-957f-4361aec68315", "sighting--2200e18d-3464-483f-9c6e-ba655b397752", "sighting--27f03d5c-934d-4acb-9f8b-dc1f1f76d5cf", "sighting--4f67e1aa-3bfd-4b87-91df-43cea5e121c3", "sighting--1b9095db-7329-4cb2-bcfb-7079cd82477c", "sighting--06fa5a94-ab50-450b-9e0f-3810becc6c23", "sighting--3e53ecb6-9263-48d1-aa54-bd02e60b8602"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-10-04T11:00:01.343Z", "modified": "2026-10-04T11:00:01.343Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}